> If it gets to the point where management thinks that's even an appropriate solution then management has clearly lost the plot and OS permissions won't help.

> If it gets to the point where management thinks that's even an appropriate solution then management has clearly lost the plot and OS permissions won't help. I generally agree, but it helps everyone—IT especially—to just say "Apple won't let us do that"; rather than having to say, "it's possible but I won't do that".