I work in IT in a German company. Every user has admin rights on the local machine. Why? Because the IT-Boss couldn't figure out how to allow installing updates (software and OS) on Win 7 without having admin. And then there is the semi-official "shadow IT".