Originally posted by: poopaskoopa
Originally posted by: wyvrn
If I was network administrator, I would not give end users administrative control of their pc's either. In fact, I would use Active Directory to push software they need and delete non-company standard software as soon as it showed up. I have seen too many cases where non-company software screwed up systems and administrators had to spend half a day fixing one damn machine. I would only give certain IT people and the VP's administrative access, and even then I would make them aware of our software policies first. It does suck in your situation, but for the good of the IT department that policy is neccessary.
This really depends on your corporate culture though. It'll also depend on the type of business(you can't tell developers that they can't have admin access to their boxes, really...). I've been with a company where IT/security dictates how users operate, and I've been with a company where the users(to a great extent) dictate how IT/security works(or... work around the users

). In the end, it'll depend on what type/level of service the business expects from its IT. As for resetting passwords, ERD would be the tool of my choice... Costs mucho $$$ though...