well UAC is definately on and we want it to stay on as its a somewhat important feature of vista.

and quite a few of our staff need local admin rights to their machines so this becomes an issue aswell