I used to have the staff as all admins. Every few months someone would pick up a virus. Forcing me to reformat and reinstall. Been giving them standard user permissions for the past year. No more malware. It does get annoying sometimes though when the hospital decides to change its system and new Active X plugins and programs need to be installed. But I also got better with group policy too. So it lets me get around that sometimes.