"Could that be the problem rather than user rights?"

Well, if the program can't see mapped drives that have required components, it won't launch. If the update can't find mapped drives, it won't update; but the user rights is because they don't want their user to be able to run the updates.

Not seeing mapped drives can be resolved.

Controlling Updates by controlling Windows users is a bit trickier, because it is Conditional.