IMHO the best way to install and to upgrade is execute a single line like 'OCS-Agent-Setup.exe /S /NO_SPLASH /NO_SYSTRAY /SERVER=.... /SSL=. /CA /UPGRADE' (with /UPGRADE if you create a package for upgrade agent)
I worked during 1 year for a company with nearly 7k Windows PC for upgrade the OCS solution (old = 2.0.5). I upgrade the server to 2.8.1. For Windows agent, it was possible to execute a package with a small .cmd with the line. But it's was not as secure as wanted.
So as each 2 years, it's mandatory to upgrade Windows edition (1909, 20H1, ..), in the process, the agent is upgraded with the small .cmd.
But on any Windows computer, there is a small service, run only at starting :
There is a folder C:\TELEDIS. Under there is folders with software installation scripts.
The service run as 'Local Admin', scan folders under C:\TELEDIS, when a folder exist, there is a verification with a server, and the software is installed.
This is a way to install software when the user start it PC and without user is Admin.
So best usage is use OCS to create a 'store' package to create subfolder inside 'C:\TELEDIS', and not directly execute installation script when user is running the computer.