Comment Re:I hope this helps this problem (Score 1) 329
Those posters were not lying.
I work as an admin where all our users do not have Admin rights. This has saved our behinds on so many occasions because most of our users are so stupid that they will click on anything. Yes, It is a royal pain to administer since Java and flash seems to update every week, but we can work around that as well. We have 4 people total in our department and only 2 of us manage the SUS/SMS updating for over 1300 (less now since the corporate mandated 10% reduction in payroll lol!) PC's and users. Everything else that wont update with SUS/SMS we can script and execute with remote command service that has to authenticate each time with a secret OU administrative account that has a password from hell. We are lucky that we managed to keep this as the status qou since most organizations management hates to have to call us to install some stupid player or software, and it's a battle we fight all the time. But when everybody else was dead in the water with Melissa, and all the other nasty stuff, we had the luxury of knowing that all the infections were quarrantined to the PC itself because it could not have the authority to do anything, and we could go and clean them up as we had time, and still be relatively productive. The worst thing we would experience is that the individual user profile would be cheesed up, which was an easy quick fix until we could get the offending files off the PC.
Yes everybody thinks we are the evil pricks that won't let anybody have any fun with their computers. But if something ever got loose, we would be the first they would want to hang for it. So we just put it to them in a way that makes them sound really stupid for wanting to install anything they want on the PC's (Which is REALLY easy) and fortunately we have, for the most part good upper management that at sometime in their past got bit in the ass from something nasty that got loose on their network, and they back us up when we show them that simply keeping the idiot user in the "Users" group saves more money than they could possibly imagine.
Knock on wood... Because of this simple policy, we have not had one single infection on our network from these scareware apps. However we have had many a user want us to clean up their home PC. It kind of makes up for the overtime and raises we haven't gotten for the last 5 years!