W2K Pro Power Users & Critical Updates

My end users use W2K Pro and connect to a NT4.0 domain. After successful sign-on to the domain they are granted power user rights on the local system. This is done because the group “domain users” from the domain has been added to the local system’s power users group found under the Users & Passwords control panel. W2K Pro will not allow power users to execute Windows security and critical updates. Is there some way to bypass this limitation on power users or force the updates onto the system while a power user is logged on? I have only 7 technicians to handle 5000 computers.