Comment Re:PEBKAC (Score 1) 374
I have found that taking rights away from people that don't really need it without telling them is the way to go. Just remove local admin from their account and see if they run into problems. They have no idea that they've been setup differently and they don't even know what you're doing if/when you add it back anyway (they don't care).
You simply do it and then watch as your level of support calls from those people drop. If necessary, for some older programs, you give the user rights to that programs folder or a few registry entries. It not only prevents viruses, malware, and other junk, but it also keeps them from installing all kinds of stupid little programs that they don't need.
Also, if you present the argument as "We need to take away this access so they don't try to install pirated software" management tends to agree in a heart beat. It's even better if you have evidence that someone has already installed "unauthorized software".