Our users have local admin rights ( only on their pc's ) if not, they would not be able to run certain s/w packages we have.