beside of that, what would happen in worst case if we decide to set group
policy settings to default, which means that active content in untrusted
websites is allowed.

i spoke to many other it administrative persons, and nearly none of them
have a strict policie like us. they all got anti virus ...

[ more ]