The key is that the process running the installation needs administrator rights. If you log on as an administrator and configure Windows Update to download and install updates on a regular schedule, ...