Isn't just easier, and more rational, to keep a cattle prod, a roll of carpet and some quicklime handy while flat out banning anything that might fugg up your wonderful network. Never let Lusers take control of anything, let alone install something that you then have to manage for them. That is a violation of rule 1 & 2 of the BOFH book, Rule 1 being "We don't talk about Luser-installed network attached hardware", and Rule 2 being "We don't talk about what happens to Lusers who install network attached hardware".
Biting the hand that feeds IT
