hehehe...

Have to disagree. Very hard to LOCK down NT and still have a useable system.

Smart user can overcome most lock down measures if they are persistent and knowledgeable. If you really force it so that they are really locked down, then legacy apps quit working and even normal workflow of the user is interuppted.

So, yes - maybe you can lock it down, but if locked down hard, normal workflow is impacted.

I guess for me the keyword there is USEABLE