Hi, looks like a simple question, but I can't find the answer to it.
How should we disable installation of Windows Updates for non-administrators on Windows Server 2012 R2 RDS environment, but leave it possible to install them for administrators using Control Panel? WSUS is not used in this environment.