One of the major push back argument that you will get is the inability
to install new applications/software by desktop users.

I tried to do something similar for very very large US university. But
the project failed simply because the faculty/staff members wanted the
ability to install new applications without calling the desktop
support.

However if you MUST remove the administrative privelges, take a look
at the Protection Manager by Winternals.
http://www.winternals.com/Products/ProtectionManager/Default.aspx

Protection Manager or something similar is a MUST if you don't want
the computer usage to be adversely affected.

--
Saqib Ali, CISSP, ISSAP
Support http://www.capital-punishment.net
-----------
"I fear, if I rebel against my Lord, the retribution of an Awful Day
(The Day of Resurrection)" Al-Quran 6:15
-----------

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]