But if you walk into court and say that we have a policy that says you can't do it there's a million lawyers out there that will prove that you _could_ have placed technological solutions in place but that you didn't care about the welfare of your employees. Then the only leg you have left to stand on is that wooden one in the back closet that the termites got to last year.....

At least if you can show that you _monitor_ and that you check the logs regularly, (per a laid down policy), and that you have a disciplinary policy in place should such activity be found, (better yet have an example of disciplinary action you have taken - even if it is only a warning), then you have a chance at keeping the thieving bloodsuckers at bay.

I monitor... I block.... I randomly watch for too many ad sites being accessed in real time.... I watch your desktop without you knowing it if your activity becomes "suspicious"..... I warn you, (and save the warning), if you are being bad..... I create a file on you if you continue and warn you further.... I inform your supervisor with a copy of the warnings.... I cut off your internet access if you still continue and inform the administrator of the employees actions and the supervisors inactions at that point.....

Am I a complete bastard?.... Yes.... Is it my job to prevent those that would risk my company's existence from doing harm?... Yes.... It's why they pay me...... and I have the policies in place and email the AUP every three months to everyone on the network.... So they can't say they don't know.... Because they got the AUP in the orientation too.....

I do give flexibility..... I don't allow abuse..... It's my network.... You play by my rules.....

And it takes me a few minutes a week at a cost of less than $5 per user per year..... SWEET...