Currently Spotfire hotfixes can only be deployed from the Spotfire server via an SDN file. We have a remote computing environment where Windows roaming profiles are not enabled and where users have restricted rights on the remote desktops. This makes deploying Spotfire hotfixes next-to-impossible. Making hotfixes available in an msi format would allow us to deploy the hotfixes via SCCM.
This is really a problem with your environment. We have a restricted environment too but we worked with the software packaging team to enable the required directory permissions for the client to do auto updates. One of the more secure environments didn't even allow for this so we created a separate deployment area for this group of users and we keep the client packages static for them. We only update their packages if a bug is found at which point we need to repackage the client software. You can segregate users this way very easily. LDAP groups can have default deployment areas.