We are upgrading our clients from Windows 7 Pro to Enterprise and was wondering if Applocker can be configured to allow Domain Users to install approved software? We currently have SCCM 2007 in our environment and a good example would be if a user installs iTunes via the SCCM 2007 "Get Programs" feature, but then is later prompted to install updates a month later, but since they are not administrators their credentials will of course not allow the upgrade. Could Applocker get around this and either elevate a user to admin or somehow allow particular software titles to be upgraded without me repackaging them within SCCM?