that's good.
we also have locked down wksta's in my current work environment.
it just makes me more job.
when network has a routine to reinstall windows
or just to ghost to disks, the reinstallation is so quick (fastest is 5min.) that there is no point making your own work harder by limiting users rights on wksta.

but like I said, it's more like corporative decission and neither way is not so bad.

cheers,
_________________________
!

download KiXnet