Ready, Aye, Ready

Recently at work we found that one of our workstations had been compromised and was acting as a spam server. The primary user of that machine swore blind that he hadn't done anything wrong like visiting iffy websites and installing dicey software. As no other machines in the office -- that we've located at least -- have had a similar problem I'm rather not inclined to believe him.

For a long time, I've held it as a fundamental requirement that users (at least in a development environment) should be able to administer their machines in order to be as productive and capable as possible. I'm now beginning to change my mind on that, at least in this specific case...