there is very little reason why a given user can't be local admin on a specific workstation.

the worst they can do is fubar it, in which a re-image is good enough
_________________________
How to ask questions the smart way <-----------> Before you ask