what to do when desktop updates cant be automatic

maybe "automatic updates" is allowable on the desktop?   And automatic updates happen even when McAfee stands in their way?

i guess we will have to muddle thru this ourselves.  i'll post what i find after we try things out.  i'll suggest to our ops staff that we try simply installing the desktop on 2 developer machines 1st and watch and learn how our security software and "automatic updates" on this product interact.  i'm reluctant to get into the mass deployment model suggested by amit just yet.  it seems complicated and we just want to get our feet wet at this point.  we arent even sure yet if pbi is good for us.  And even if it is, if the desktop will be necessary once we install the on prem service.  we wonder if the service can serve as a "public desktop" and i guess we will learn that the hard way too.