I'm fine if you down vote me but what exactly is wrong with my suggestion that preventing users running malware is exactly what the sysadmin's job is, and sysa

I'm fine if you down vote me but what exactly is wrong with my suggestion that preventing users running malware is exactly what the sysadmin's job is, and sysadmins have exactly the tools, authority and need to do it. Where did I get it wrong?