I'm embarrassed to even post this, but, I need to get this fixed. On a terminal server, we had to put our domain users in the local administrators group. As you can imagine, we had alot of concerns about doing this, especially when it came to software installation. I used gpedit.msc on the box to put on a restrictions. Since doing this, we remedied the problems that required domain users to have admin rights. Now, I can not remember where that restriction is. Could someone please remind me?