This is one of those eternal debates. Should users have admin rights, even roaming users on laptops.
Ok, my experience is that giving any user (except for a qualified IT staff person!) local Admin rights will only lead to disaster.
EVERY TIME it happens, the user will eventually destroy their machine.
Now that they have Admin rights, they can install that freeware program they downloaded off the Internet. And they do this type of thing. Of course, they leave the anti virus program running, along with a dozen other programs that are running at the same time, while they try and install the freeware program.
And they have problems with the install, since files are open and locked.
So, they try and fix the problems, according to vague descriptions in unintelligent help files.
And then their e-mail is not working, or spreadsheet program, or IE is now acting weird, and the help file said to delete some DLL file things, and so they did but now they can't log in, and what is the Userinit.exe error, anyway???
At this point, they call for help. I walk over, and their computer is literally smoking, and there is a giant sad emoticon face on the monitor and nothing else.
"What did you do," I ask them.
"Nothing. I just tried to download a file from the Internet, and this happened. Can you fix it before lunch????"
