That sounds like comunsium. "not upseting current models". Isnt upsetting the status quo what capitalism all about?

Well its not for every computer in the org. It depends on what the machine is used for and what data is stored on it instead of a server. Good network storage and security can go a long way. Like say, using what has been in windows since NT 3. Time of day restriction. If the regular user / cubicle dweller does not access the office or remote in out side of normal hours then disable that pc's and local account and remote access for out of hours. It SOUNDS like a lot to manage, but it is just a bit of labor, no need to buy anything new.