I&#x27;ve been the person disabling the accounts of former employees in just that situation after a couple of warnings. Not being an employee or always on-site I have no idea if there were other &quot;dumb and inconsequential&quot; rules also being broken, but I know for sure when the &quot;no personal email or surfing&quot; rule stopped being broken. Admittedly the case I&#x27;m thinking of was a low-level staffer not a medical professional (or developer), but on the other hand I&#x27;ve also seen the advice to &quot;find your indispensable person and fire them (before they quit or get hit by a bus).&quot;<p>I&#x27;ve also been the person being asked &quot;hey, just between us, how can I check my email&#x2F;MySpace&#x2F;LiveJournal&#x2F;Facebook&#x2F;Flavor-of-the-week?&quot; Answer: Get a smartphone, use their app or check your email during breaks on your phone not on the company network. Some places are more rigid about this and some are less. I also tell businesses that I can do some measure of blocking, but that at its core things like this are a business and HR policy thing as much as they&#x27;re a technical issue to be addressed.<p>And finally, I&#x27;ve been the person charging for cleaning up viruses, doing nuke-and-paves, and (fortunately only once) restoring from backup after what I&#x27;ll still call &quot;stupid user tricks&quot; when a senior partner wanted a newer version of Office and went to download it. Ain&#x27;t Cryptolocker fun?