Interesting article in eWeek by Andrew Garcia on locking systems down.
Barring users from gaining administrative access—and thus restricting their ability to install such unwanted or malicious software—will automatically tighten security and will garner other benefits as well.
Link here.
Pretty pictures here.
Alex Eckelberry