I have AD with Windows XP workstations. How can I configure applications to operate properly without giving the users administrator rights?