Michel,
You're Adobe account rep can probably give you the details, but we have an ETLA (enterprise/education) license that lets us package installers without the CC Desktop application. These are what Adobe calls "anonymous" installations and do not require communication with Adobe after the installation packages are built. You can also use the Remote Update Manager to host and deploy updates internally. The server downloads updates from Adobe. The clients need only communicate with the local update server.
Ric