By default domain users do not have rights or have limited rights to the local pc(workstation). With programs such as quickbooks you need to have some rights to the local pc. Is there a group to assign them to or a group policy to accomplish this. Right now we go to each machine and add them in and give them a high level of access.