Not by default (Score 1)

The company I work for uses a "As needed" rule to allow this. We, IT, have setup the environment (Mostly XP) so users are user, no admins, and removed the VBS extensions as well. This coupled with several webfilters and out proxy keep us rather save from 99% of what is out there. Are main enry point now is USB drives coming from home, but even they are very limited since users are users and the antivirus software we use catches these rather quickly.

All that is needed is a request to the supervisor and we grant them the access.