In my shop, we have stand-alone Windows 2003 Server. The whiz-kid who runs this server (not me, I'm the "Syadmin Who Fixes Things"; I work closely with the "Sysadmin Who Fucks Everything Up ...

How do you guys handle remote users who don't have local admin access to their computers (laptops) when they need to add something like a local printer? I do have a backdoor account that I set up ...

Windows finally includes a tool to manage local admin passwords, but admins will still need to do some work to make it useful.