We installed Firefox on all users machines, used a standard security config, and told them to stop using IE except for certain sites, such as microsoft.com and various, stupidly designed, internal applications. I expect to see a drastic decrease in spyware on the "Usual User Suspects" machines. The same usual suspects that always have something like "420 objects found" when you run spyware cleaning tools on their machines. I'll let you know how it works out.
Comments