We currently use windows XP and everyone is a local admin, we are in the process of migrating to windows 7. We want to restrict access from the users so they can't change the system config or install software. But we want the users to be able to install any personal printer. What is the best way to approach this problem???