In our environment, we try to limit administrative rights as much as
possible. What we're finding is that applications in some cases require
modify permissions to the associated registry and file system folders in
order to update, or run certain pieces of the program. The software vendor
assumes that all users of their app will have power users or administrative
rights. When we push the software with sms, the user still needs elevated
rights to the folders and registry keys in some instances when we take their
admin rights away. How do others handle these issues. We take the users
rights away to install software and use SMS to push it, then the users can't
run the app unless we change the acls are changed on the folders and files.  
Can the acl changes be included in the package?

What are some other ways to automate this piece.

Thanks