I really don’t get why there’s always this group of people who feel the need to constantly manage everything for others—like sysadmins, for example. Sure, there are valid scenarios where management makes sense, like printing or shared drives, but most of the stuff is just over the top. As a developer, I’m sick of all the constant restrictions—broken VPNs, stealth monitoring, and antivirus software that slows everything down. These "security measures" are supposed to help, but they just kill performance and cause frustration. At the end of the day, I just want my system to work smoothly without constant interference.
I think everyone hates it, but they're often legally required. Even when they aren't legally required, they usually are by insurance companies.
Nobody wants to be on the news the first time Becky in Marketing opens an email attachment she shouldn't.
*EDIT* I left out one of the biggest benefits: Dummies & Newbs. The world is filled with people who have never used a mouse before they started this job Last week and people who actually NEED the stupid warning stickers on their toasters. If you don't lock down their desktops your support costs will be astronomical and downtime will be constant. We know this because there was a time before these tools, and it largely sucked for everyone.
Did you know that you can bypass the windows 98 login screen by just clicking 'Cancel' instead of 'OK' at the login prompt? Nice and simple, right? That stupid button not only wrecked security it caused 10's or 100's of thousands of hours in lost work because people forgot their passwords, clicked Cancel, and then would call the help desk wondering why network shares didnt work. It would sometimes take hours to figure that all they had to do was reset the password and login properly.