I lost on keeping our shipping users from being local admin's and now our shipping solution only works if they are local admins.
I'm now stuck with this ugly mess and need to limit the amount of damage these bot nets in waiting can do to my network. Any suggestions, GPO tricks?
Those with the same predicament how do you handle the risk? (besides drinking)