Our user DLU's run at the User level, so we install any extra software that isn't on our image using the local Administrator account. Sometimes users are prompted to enter the Administrator password just to run such software, but it seems to depend on the program.

Virtual Apps are not always possible so I'm trying to understand the mechanics of why Users can run something installed under Administrator.