Completely agree, too many users are clueless fsckwits who whine when you're protecting them from themelves.

I don't consider any requests for access / features unless accompanied by a written (at least an A4 page) _very_ good reason why you need X and you can convince someone from IT to support your case. Any requests that do make it to me are usually genuine and business-related.

Making non-compliance costly works as well (in corporate setups). I happen to know that $PR_firm that had $AV_vendor as a client actually made it a sackable offence to get infected because it was happening regularly and $AV_vendor was threatening to leave the firm.

Oncoming bullets now.... (if aimed at select users) would make my life so much easier.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/236/26007#26007