They are accessing the application from a Citrix environment so they are launching published applications and can't run as administrator. Additionally, when they launch the published application (both Word and Sage) they are doing so with the same rights that they are using to launch the Word application from the Sage taskbar.