Start with a Small Group
Can't win management, win the users. After all, you interface with them more.
What I did was started rebuilding problematic machines first and locked out the user to "restricted user only". Installed all the applications they will need or conceivably need in the future, setup for multiple network printers. Explained to the user(s) that we will try something different that will help stabilize their computers by locking the computer down for changes or installation by malicious intent like viruses, people who will try to steal personal data in the computer, etc. This part they understood very well. I also compromised that within the 15 work day period, I will give them top priority if there is any problems or concerns.
Eventually, others who are tired of experiencing problems daily asked that their machines be rebuilt to make it stable. The Users are now willing to sacrifice administrator rights for a stable machine that they can do work.
Explained to them too that IT understands no company user intends to sabotage any computer or their own, it is the things that happen in the background that they don't know because of having administrator or power user rights that is creating this problem that is why lock down helps to stablize their computer.
Good Luck
