We have quite a few clients having received new computers with win7pro. They are domain users under a w2008r2 domain. They don't have the local admin password because I wanted to prevent that they install all kind of crappy software.
However I DO want them to be able to install printer drivers for their home printers, AND also to update Java, Windows Updates and preferable updates to all the software already installed (OpenOffice, Mozilla stuff etc...)
HOW do I solve this in an elegant way? I wish windows had a permission type called 'Update any existing software'.. I tried to enable the GPO which allow users to install printer drivers, but it does not seem to work or give the desired effect. At least their computers still yell for an admin when needing printer driver installers or updates.
Thanks for comments, good advice and howtos to elegantly allow users to maintain the software in their computers without giving them permission to install anything ...