*shrug* There's 50,000 people here with admin rights. We'd need twice as many desk side support people to handle things if they didn't have admin rights. I just don't think it's cost efficient.

addition: Each person has admin rights to only their own machine. And only administrators can log on locally. So only the user(s) of that machine can log on locally.

Rich