The one piece I haven't seen addressed so far was the developers and software testers, who have in the past had a justifiable argument for administrative priveleges. This can now be addressed by virtual pc or vmware, and allowing administrative priveleges on a virtual instance. It still has some of the dangers of allowing users to install their own software on your internal network, but it does limit the support they require when they make a severe mistake. (Make a backup copy of their virtual machine.)
smime.p7s
Description: S/MIME cryptographic signature
