I'm doing an assessment on the potential outspread of [Bad Rabbit][1] in our organization. Our staff do not have admin privileges on their host machines. We have also blocked the IOCs. Am I safe to say without admin privileges, the ransomware wouldn't be able to install the fake flash update/mimikatz? 

Any other pointers we need to look out for, other than the ones for WannaCry, Petya, NotPetya?

  [1]: https://www.bleepingcomputer.com/news/security/bad-rabbit-ransomware-outbreak-hits-eastern-europe/