I work for a rather prominent Australian business largely involved in the medical field. They have very strict guidelines about internet usage, and endless 'Standard Operating Procedures' that outline these rules. IE is the browser supplied to us on all PCs, and very aggressive filters monitor our activities.
However, about 2 years ago I did something rather clever. No executable can be run without sysadmin rights. Somehow they overlooked applying this rule to our 'My Documents' folder...