Was posed a typical problem a few weeks back.  There was an application in our customers business that was updated quite frequently and the application required these updates to launch.  The problem was, the users were using the application through a terminal server on Thin Clients and XenApp published applications.  The application needed the users to be local administrators on the server in order to complete the update.  In this instance the application was a custom application from Sara Lee for transferring files, not much use for anyone else as an application... but the principal and application of ThinApp is widespread to many apps that have this issue.

Solution: The ThinApp sandbox.  Packaging the applications and linking the dependencies via AppLink, we were able to deploy the application fully isolated from the terminal server.  This allowed the application to use the sandbox location (the users profile in this instance) to install and run the updates therefore bypassing the security need.  The application was able to update and run as normal as a ThinApp. 

The deeper I dive with application virtualization and delivery, the more uses (and less problems) I find.  Now if only EVERY application was isolated and virtualized that would be an admins dream.  1 more down... looking forward to the next challenge.