We have a domain, and I need my domain users to be in the Administrator group because they do their own Windows Updates.
This however lets the user install software and things like IE Toolbars.
Ideas for prevention of toolbar install? Software install restrictions but allow Windows updates?
Using Group Policy ?