Working at a College I have a group of students that need to have
administrator rights on there laptops but if they login to our lab
workstions we only want them to be able to have the default users rights.

And it needs to be able to do DLU on both but non volatile on the laptops
and volatile on the workstations. Is this possible to do?