From: Richard B. 

On Thu, 20 Jul 2006 18:11:02 -0400, "Robert Comer"
 wrote:

>Sometimes I wish I wasn't so nice and as policy locked down their
>desktops to the point that they couldn't do anything personal.

When it comes to protection I do my best to keep them locked down, short of
mandatory profiles.  We do content filtering and I make it clear we err on
the side of safety.

It doesn't make IT very popular mainly because the users don't understand
the trouble they can cause.  Even though 100% of the employee home machines
we have worked on (maybe 20 over the past few years) have significant
exploits, they still don't get it.  This is why they don't have VPN access
from home, who knows what exploits they have on the non-firewalled, long
out-of-date virus subscription machines.

- Richard

--- BBBS/NT v4.01 Flag-5