We have a WSUS server installed and the workstations are pulling their updates nicely from the server...

The problem is, I have set the local group policy to configure automatic updates to level 4 (automatically download and install), no delays, don't prompt for reboots etc.

The users all have user accounts, which is why I want the updates to auto install, they don't get to see the update notifications...

But the update process only works when I log onto the machines as an administrator!

Have I missed a setting somewhere? The updates download automatically, but the "automatically install" setting seems to be ignored.

(XP SP2 and SP3, mixed and Vista 64-bit)

Have you configured a day and time to install?

These are our settings for WSUS and it works fine though we do show the notification as machines were rebooting while people were working. I have left off the WSUS server name

Automatic Updates (Startup Mode: Automatic)hide
PermissionsType Name Permission
Allow Everyone Full Control
Auditing
No auditing specified
Administrative Templateshide
Windows Components/Windows Updatehide
Policy Setting
Configure Automatic Updates Enabled
Configure automatic updating: 4 - Auto download and schedule the install
The following settings are only required
and applicable if 4 is selected.
Scheduled install day: 2 - Every Monday
Scheduled install time: 17:00

Policy Setting
Enable client-side targeting Enabled
Target group name for this computer HOComputers

Policy Setting
No auto-restart with logged on users for scheduled automatic updates installations Enabled
Specify intranet Microsoft update service location Enabled
Set the intranet update service for detecting updates:
Set the intranet statistics server:

Apart from the Target Group, that looks like the settings I have...