And it does feel somewhat draconian at times.
I guess that's when we have to emerge from the IT dungeon and use our *cough* people skills to educate the users why it is necessary to protect their employer, themselves and their paycheck.