We use SF for installs and updates. For updates I have an IT partner asking me if there is a way to allow my silent updates to apply with administrative rights even if the (Windows) user isnt an admin. Id assume I would have to set this up during the install to allow updates to apply with full rights. The installer will be ran on a user account with full rights.