Students are only domain users and are not local administrators of the machines. I do not currently have software restrictions turned on.
Users have been able to download firefox and then when installing click cancel on the UAC prompt and then the software installs to the profile folder on the machine.
How do I disable all profile folder installs? It's driving me insane that they are able to install stuff, yet they aren't a local admin.