Peeling off desktop Administrator Rights

["Plesco, Todd" <tplesco () CHAPMAN EDU>]

Does anyone know of a product/application (rather than the orthodox and typical Active Directory method) which removes 
Microsoft "Administrator" group rights from users to be replaced with "User" or "Power User" group rights without 
impacting existing applications which were installed with Administrator privilege?

One of our desktop managers is looking for the "easy" application based method to do this without bringing in a full 
Active Directory GPO & OU development project.  The end result being sought is that further applications may not be 
installed by users but existing applications will still function.

Todd A. Plesco  CISM, CBCP
Chapman University, Director of Information Security
One University Drive, Orange, CA 92866
Phone: (714) 744-7979/Fax: (714) 744-7041