One of the major push back argument that you will get is the inability to install new applications/software by desktop users.
I tried to do something similar for very very large US university. But the project failed simply because the faculty/staff members wanted the ability to install new applications without calling the desktop support. However if you MUST remove the administrative privelges, take a look at the Protection Manager by Winternals. http://www.winternals.com/Products/ProtectionManager/Default.aspx Protection Manager or something similar is a MUST if you don't want the computer usage to be adversely affected. -- Saqib Ali, CISSP, ISSAP Support http://www.capital-punishment.net ----------- "I fear, if I rebel against my Lord, the retribution of an Awful Day (The Day of Resurrection)" Al-Quran 6:15 ----------- --------------------------------------------------------------------------- ---------------------------------------------------------------------------
