Ask any Windows administrator or security professional and you'll find widespread support for locking down PCs by removing users' administrative privileges. Why then have so many IT organizations been unable to implement better controls in their desktop environments? The truth is that removing admin rights is only part of an application control solution. IT organizations still need to address many critical requirements, such as:

• How can you overcome organizational resistance to more control on the desktop?
• How will legitimate software be installed without overburdening the IT staff?
• What policy should be applied to users who must install software, such as engineers or executives?

This document will examine answers to questions like these, and outline a nine-step methodology that can make or break your transition to a well-managed and controlled Windows environment.