Drives me nuts when companies don't give developers admin rights. This is a dumb mindset where they're treating them like a regular users. If you are concerned about them having elevated rights and what they can or cannot do on their machines, put them in a different domain from the rest of the users. That way it won't matter what they have access to.

The funny part is, when I have worked at places that restrict developers rights like that, normally have so much red tape already, nothing gets done in a timely manner. They tend to be ok with having unproductive developers.