The problem is, I'm a University library's systems librarian, the user rights and policies are set by the main IT department - so I have no control of it.
Ultimately, it is their responsibility to fix the machines, but if we wait for them, it takes 2-3 weeks, whereas I can get to them usually on the same day.
Now I could change the policies on these machines - at least the users who have the most problems - but I'm not sure how the main IT folks would feel about this. One thought I'm entertaining is to install Deep Freeze - the software we use for the public PCs - on these staffers' machines, and just leave a thawspace for documents. I really hate being that restrictive, but I also hate spending hours straightening out their machines every month or two.