Spyware/Adware Prevention In Large Deployments?

foQ writes "I work in the IS department for a ~2000 networked computer environment across 10 locations. As with most people, we have experienced serious problems with spyware/adware. We have SpyBot and Ad-Aware installed on most computers, but this doesn't prevent the computers from getting these programs and only sometimes properly removes all of them. Is there a tool that we could push out to all the PCs to basically do what anti-virus programs do and block these programs from running and clean them from the computer?"

Comments

Shut off the Internet

[jafiwam]

No internet, no spyware.

It has been my experience that the larger the company, the less likely any individual has the business need to get on the Internet (specifically browsing). So you can stop a whole bunch of the rank and file getting all that stuff if you simply do not let them have access all.

Using images that do not have Internet Explorer icons visible helps a lot too.

I work at a small company, so spyware software is easy to update. Public humiliation at company meetings for those that get the stuff works wonders.... "Weather Bug" doesnt get downloaded twice if the perp is named at the meeting and has to go get lunch the next day.