By default I think when a PC is added to the domain it gives Domain Admins local Administrators rights. Is that Correct? Then gives Domain Users, local User rights. Is that Correct?
Next would that mean that if a user is a Domain User they would have the same rights as if I went in and add them to the local user group?
If you any links for Microsoft that refers to this please let me know.
Also the rights a user account has to install programs.