Take a look at:
http://support.microsoft.com/default.aspx?scid=kb;en-us;328010

This article outlines how to use the registry or GP policy to enable the
settings you are looking for on your machines.

Best Regards,
Rob Hoffman, MCSE
Microsoft Enterprise Support Engineer
Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
Content-Class: urn:content-classes:message
From: "help" <anonymous@discussions.microsoft.com>
Sender: "help" <anonymous@discussions.microsoft.com>
Subject: update windows 2000
Date: Thu, 23 Sep 2004 06:00:49 -0700
Lines: 13
Message-ID: <478a01c4a16d$59882ba0$a501280a@phx.gbl>
MIME-Version: 1.0
Content-Type: text/plain;
    charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
thread-index: AcShbVmFqc07t/4cSdedtRiI+aChxg==
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
Newsgroups: microsoft.public.win2000.windows_update
Path: cpmsftngxa06.phx.gbl
Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.windows_update:15621
NNTP-Posting-Host: tk2msftngxa13.phx.gbl 10.40.1.165
X-Tomcat-NG: microsoft.public.win2000.windows_update

I hope some one can help here I have a two part question.
We using windows 2000

First is there a way to have the update access the
internet and the user not.

Second Is there a way for th update to update and install
in the background so when the a user that does not have
admin rights it does the update and install?

Thanks in advance