[ActiveDir] Script Blocking

[Peter Jessop]

Here is the scenario.

An AD domain of about 1000 users and computers distributed among over 60 offices.
Some users are in the local administrators group of their workstations.
The reasons are varied but included
a) Some program didn't function without elevated priveleges.
b) The user wanted to install something and no one had time to do it for them.
c) The user is a boss and insists.

On various occasions I have reversed this situation using restricted groups.
This always causes lots of calls to the help desk and does nothing to increase my popularity.
Even Microsoft Office sometimes doesn't work properly (probably because it wasn't installed correctly) unless the users privileges are restored.

Well there you have the reasons (all bad, but...)

Here is the problem:-

Some users have installed programs which block login scripts that I distribute through group policy. You all know these programs. Antivirus, antispyware and personal firewalls.

Do any of you good people have the same problem and what methods are you adopting to solve it.

Regards

Peter Jessop