Hi DBG
Also to clarify, in my clients' networks its also true that no app ever gets installed unless it's an application approved by the IT network staff following advice from other senior staff. That decision can typically take several months and I've often had to overcome hostility from network staff to installing any Access app across the network. If the 'powers that be' are not prepared to accept my conditions, I don't proceed with the sale.
However, once approved, the application(s) are installed by program admins/network staff to the workstations of all approved users ONLY.
This happens automatically the next time the user(s) log on. Similarly the script to trust the location is run automatically.
A typical client organisation will have anything up to 250 users but, at most, only 2 or 3 will be given elevated permissions to manage the application
End users do not have permissions to install or edit any applications anything themselves nor do they have permission to edit the registry (even if they know how). As they have no ability to reach Access options, end users cannot do any editing there either.
The reason for doing all the above is once again to be safe rather than sorry.
As I say the system has been in use for well over a decade and is absolutely foolproof.