It is irresponsible for a company to publish software which exposes the entire system to harm via Admin rights just so they can update a form or two?

The only work around that I am aware of would be to have the system admin log into the workstation, and run the updates over giving permission to the local user of the machine. The administrator would be able to run the update from Sage 300 CRE or alternatively could download the manual update and run the update from the downloaded file.

There is a documentation on Aatrix web site that covers what is required.

https://www.aatrix.com/info/updates/tech-info 

https://www.aatrix.com/info/updates/ for the list of files and folders, as well as firewall and anti-virus permissions and exclusions and Proxy Server information for internet access

The exact names of each folder will vary depending on the payroll or accounting application and may be unique to the user's computer or network configuration.

This is an old post but I will post an update in case it helps anyone else searching on this topic.  An alternative to making the user an administrator, you can give the user read/write access to the path Aatirx is updating which is C:\Program Files (x86)\Aatrix Software\Aatrix Forms\STO.  We created a domain group which we assigned or Aatrix users to so that only they have read/write access folder vs. opening up the folder for all users.

Sage is on its last leg I believe - we have been seeing way too many problems with their software.