Windows Server 2008 R2 as a Desktop

[VMTRB]

All,

We have been thinking about offering Windows Server 2008 R2 as a desktop but we have hit a snag. If the user is a local administrator they can add any "roles and features" they want. Which means that they could install a domain controller, file server, etc. We would like to prevent this from happening but I have been able to. Any thoughts?

Thanks in advance.

[pbjork]

Never allow local admins. That is not only true for server OS but Windows 7 and 8 desktops as well.. Allowing users to be local admins is never a good idea.. What is the reason for the need of local admins? We have solutions with ThinApp and App Volumes that makes the need of local admin not so big.

[mittim12]

I second this statement.     It's never a good idea to allow a user to have full administrative rights to a desktop.