Sorry for the late post. Admin rights is an issue we are frequently dealing with. On our student computers (college owned and managed) we not only lock them down as tight as reasonable, we use Windows Steady State (formerly Shared Computer Toolkit) and DeepFreeze to undo any changes a student may make. (Think of inappropriate pictures as wallpaper...) One reboot and all changes are dumped. However, it is a major pain to do simple software upgrades as each pc must be rebooted, unlocked, modified, rebooted and re-locked. Sometimes it is easier to re-image the whole lab.
For our users we like to keep things locked down, but don't go to such extreme measures. For desktop users we keep them at normal user level. This is sometimes messed up when a tech upgrades their priv level to install software and they forget to remove the priv. We generally give laptop users admin rights to prevent late night support calls when the C-level can't get their laptop to connect to their home wi-fi network because they can't change then network settings.....
[Admin Note: Originally posted by tficarra]
