Depending, of course, on how tactless the systems administrator is, and how high maintenance the user population is.

On the other hand, if they buy “security products” and install them, and the “security product” disables something the users wants, the systems administrator can nod his head and say, “Yes, I understand why you find this annoying, but our security software doesn’t allow it” -> the systems administrator gets to play “good cop” and put the security software in the role of “bad cop”.

It’s a trust issue: it is very common for people to want to argue with their IT guy (and why not, they run their own computer at home), but they can’t argue with the faceless security software. Plus, the security software was written by experts, right?

Remember the old saw, “An expert is someone who doesn’t work here” 🙂