As someone who did IT work in South Korea this year for couple of weeks, I never felt so defeated trying to upgrade 15 computers from XP to Windows 7. We basically had to give everyone admin rights just for them to do their job. Bank sites that had 11 (!) ActiveX plugins with 3-factor security (password, token, plus USB key with a cert) just for them to log in - and they routinely "update" their controls, which of course, require Admin rights.
The branch manager didn't understand at first why we were having so much difficulty. I had to explain to him that if we adhered by our security standards, we'd have to close the branch because there wasn't a single operation they did which would otherwise be allowed.