Local Programmer group

azjag

Does anybody know, or ever come across, a good template to follow to lock down user rights on a programmers' pc. I have a user that is a programmer that, by need, has admin rights on his local box. However he also takes advantage of these rights on his pc by treating it like his personal home PC. I would like to reduce him to Power User on the computer and just add the individual rights that is needed to do his job. Has anybody come across this and what might they have done in this situation. Any suggestions would be greatly appreciated. I've done some searching on google but I'm not coming up with anything helpful.