Well "Management's" request is just lacking common sense and managerial thought. You don't want userA getting access to userB's C$ share, but you will permit UserA to logon to UserB's PC and be given Admin rights. Get Real.
Why not install software for them in a managed methodical way?
