Not sure how you can deal with it if they have admin rights. You need to get a handle on that. No one where I am has admin rights not even me.
The way I get around is they log in with mobile accounts and machines are syncd to the Windows Domain using ADmitMac.
I have a script which runs at 3.30 that will find and delete any apps and dmgs owned by a domain user.
They come in again and its gone and they soon give up. Also have set up Application control through mcx and external storage control through ADmitMac group policy plugin, but waiting for the go ahead to add people to the relevant security groups.
Would this script interest you?
Tim Kimpton
Systems Engineer
E: Tim.Kimpton at rufusleonard.com
D: +44 (0)20 7956 3014
W: http://www.rufusleonard.com
F: facebook.com/rufusleonarduk
T: twitter.com/rufusleonard
??
?
Rufus Leonard limited is a company registered in England and Wales with company number 3348509. Vat number: 691308528
