In this case, the Citrix client requires write access to HKLM\Software\Microsoft\MSLicensing\Store
(see this Citrix KB article) So you don't have to give the users full admin rights.
It's a software development problem, not strictly a "Windows problem". With most applications, developers assume users have admin rights, and don't test their products any other way. Even big guys like Citrix.
I suppose it's a Windows problem for reasons of history: in Win9x everyone was a root user, so Windows programmers developed bad habits. By and large, OSS developers (usually) assume you have minimal rights.
This stuff is still a nightmare to administer. If you want to remove admin rights from users, you're forced to spend hours finding permissions tweaks like this for every new application. (Use regmon & filemon from sysinternals.com - that's how I found the Citrix tweak.)
But do they answer the most important question? In a fight between Batman and Superman, who would win?
In this case, the Citrix client requires write access to HKLM\Software\Microsoft\MSLicensing\Store (see this Citrix KB article) So you don't have to give the users full admin rights.
It's a software development problem, not strictly a "Windows problem". With most applications, developers assume users have admin rights, and don't test their products any other way. Even big guys like Citrix.
I suppose it's a Windows problem for reasons of history: in Win9x everyone was a root user, so Windows programmers developed bad habits. By and large, OSS developers (usually) assume you have minimal rights.
This stuff is still a nightmare to administer. If you want to remove admin rights from users, you're forced to spend hours finding permissions tweaks like this for every new application. (Use regmon & filemon from sysinternals.com - that's how I found the Citrix tweak.)