You can centralize assign specific rights to each user and therefore prevent for example unauthorised installation of software at the single workstations.