Oh, and letting users install applications like AIM and WS_FTP and stuff would be nice too
We don't really restrict what people install, I just don't want them to have full access to their machines to hose them (which, unfortunitly, keeps happening).