said by fatmanskinny :

I worked in a huge company where machines were compromised at least once a month.

I think giving all end users admin rights on their machines is not a good idea. My new company does not allow admin rights for end users. It creates additional work for IS but the payoff is that you assist the end user in not being a danger to themselves or anyone else.

said by toadlife :

With physical access, right?