If you can enforce centrally managed and standardized desktop/workstations, then spyware, viri e.t.c.. should be a non-issue.

But if you work in a place where you have no clout (like me!), where the managers don't side with the I.T. dept. (like my management!), where the managers force you to make an exception for anyone who bitches and complains (like mine do!) -- then you are S.O.O.L.

It can be very frusterating but you got to keep reminding yourself why you do what you do - for the love and for the nookie!

[edit]
But to add, and this is the reason for OP and thread. No all my stations and managed. It's also getting pretty bad with mobile/laptop users. Almost getting to the point where every Tom, Dick and Harry who knows who to set manual IP's is connecting to the network with machines I have never seen.