Viewfinity recommendations and action items based upon the above:

Question #1:

If you’re among the IT Administrators who are looking to change this dynamic, we have a free tool that allows you to discover user accounts and groups that are members of the local “Administrators” built-in user group on computers in your Windows domain and take action, if needed, by removing the users or suspicious groups from the Administrators group.

Question #2:

For all who answered NO, you may want to consider reviewing our recorded webcast of a live demo session that demonstrates Viewfinity’s end-to-end approach that automates the analysis that silently discovers applications requiring administrative rights, prepare your environment and create policies to control User Permissions/Privilege Escalation for users who are running applications or desktop functions that require elevated privileges.

View webcast recording:  Getting Started: Removing Administrator Rights & Setting up Policies to Elevate Privileges for Standard Users