Anti-Virus/Anti-Spyware small business solutions

“Netsky-P led the top 10 chart for malware threats in August, retaining its rank despite the availability of fixes for more than two years.” C-NET Sept. 1, 2006

With issues such as this in mind what are good small business solutions beyond the obvious update, anti-virus/spyware?
How can I keep users from creating the problem without making them feel as if I am taking all their privileges away.