Permissions needed to install applications on a domain controller

jraper_at_gmail.com
Date: 09/29/05 

Date: 29 Sep 2005 09:00:32 -0700

I have a Win2k3 DC and need a user to be able to perform updates on the
DC. The user sits in the top level domain in the same AD tree. The DC
is of a child domain. The user is in all groups except Domain Admins
for the child domain because it is a global group.

I still can not get the user to install updates, I get access denied
see your administrator.

What Gives?