I always see these types of comments and wonder what Nazi fantasy world they do IT work in.....
Yeah I am gonna tell the VP of Sales while he is in Malaysia,that no cant load his USB stick with his only copy of the presentation he went there for that will save our company from going bankrupt?!?
Most users are a mix between this example and a admin assistant who only needs Word and yes we have different permissions for both types of users.
What I am getting at is when you lockdown machines your calls in go up for service and special considerations while the virus malware calls in stay the same.
Thats my experience, you ALWAYS get the virus and malware calls, no matter now lockeddown a machine is.
My 2 cents and Avira anti-vir works quite well IMHO.