We have deployed Adobe Arcrobat Pro 2017 via customisation wizard, but having issues with what file path we need to allow within Windows 10 to allow for updates

Hi, we have deployed Adobe Acrobat 2017 via customisation wizard, which is working fine. But we are having issues with knowing what file path we need to allow within Windows 10 to allow for Adobe updates to install, without being logged on as an admin user.  As we use software restriction policies on our Windows 10 devices. Do we need to allow the following paths to be unrestricted ?

C:\Program Files (x86)\Adobe\Adobe 2017\*

C:\Users\*\AppData\Local\Adobe\*

C:\Program Files (x86)\Common Files\Adobe\ARM\*

Or can they be locked down further?

Many thanks

Daf