We are planning a new Deployment framework for my company (not just internally, deployment to Customers also), which is on Premise installation, many servers, mostly windows 2012 and 2008. Instead of maintaining Compliance we need as many companies provide Update Packs, new versions, Service packs, etc.
Is DSC the framework to select?
As things stand today, DSC might not be the best choice, because it runs as the Local System account and many software vendors never bothered to test whether their installers work when executed this way. (Many will fail.)
No way to set it to work with other privileges?
If not DSC, what are other good options for a system like ours?
you could make your own resource that uses provided credentials to run the installer.