Are you trying to lock down the PC in support of existing organization policy, or locking them down in lieu of a policy? Are you supporting the objectives of the organization, or supporting the objectives of the system administration team? Do you consider yourself and your team part of the same team as the users, or as separate teams with different overall goals?
If you joined the industry after about 1990 you may not appreciate that the move from mainframe to PC based computing was drivenin large part by users working their way around the dictates of MIS. Now that we have ICT departments supporting the PC networks, we see these departments trying to replicate the control that MIS had in the mainframe heyday. What new work around approaches will users develop?
Campus designers often spend huge sums on keeping people off the grass. They put in sidewalks, add signs, and add fences. People still create their own paths. A smarter approach is to let the people define the paths and then pave those walkways.
Which approach are you trying to take ? building barriers or paving paths?
