Here's the deal...our users are logged into our network domain...but not as local users with local admin rights. We have strict control over the local machines. And we are auto upgrading using UNC names...not mapped drive letters. Works great!

One point. DO NOT have MCAFEE auto upgrade or auto update at startup. This caused all sorts of problems for our laptop users.