But you still should educate
We find our travelling roadshow for small businesses (1 hour plain English PowerPoint of what the problems of allowing staff to indiscriminitly email, IM and surf are). DRAMATICALLY reduces support requirement for stupid stuff. If only because they now understand how the kids have screwed up their home machines and they got hit in the pocket to fix them. The hit in thwe pocket lesson transfers to the workplace - for about 6 months. Then it needs re-inforcing.
If only the MS "Limited" account was really such a thing......... I like this guy's approach and arguments.