djaburg

The answer to the running their own updates on the machine, if that's REALLY what you want to do, is to add the domain user to the local administrator group. Log in to the computer as administrator, then go to CONTROL PANEL>ADMINISTRATIVE TOOLS>COMPUTER MANAGEMENT>LOCAL USERS AND GROUPS>GROUPS, double click on ADMINISTRATORS>ADD and then enter the username that you'd like to add from the domain. Once it's there, that user will be able to do JUST ABOUT ANYTHING they want on that computer, including silly things like changing configuration settings on that local machine.

__________________
Computers make it easier to do a lot of things, but most of the things they make it easier to do don't need to be done.
Andy Rooney