Some great input here - thanks.
It seems that in some cases, there are simple ways around it, whereas others there are not, for example the proxy blocking mentioned above - all's you have to do is disable the LAN settings button in IE and that solves that, yet some companies do not do this.
So what is the solution? A complete clamp down on everything, or more detailed 'eye in the sky' monitoring? Is there a compromise?
Appreciated,
Maz