You need to ensure that Peter has only the minimum permissions required to add new computer accounts to the domain and to own the accounts that he creates
You need to configure the client computers to download and automatically install the approved updates from the WSUS server