I've only had to deal with a handful of Vista machines so far, & I can definitely say that the User Account Control prompts are annoying. I can't even imagine the headaches that an entire corporate network environment of Vista machines would cause. It sounds like BeyondTrust's Privilege Manager 3.5 is just what the doctor ordered for that scenario. No word in the article or the press release about what the server environment needs to be, but I'm guessing that a Windows domain is required if they're pushing all of this through group policy...