@BigManCar - That is the problem with security. Without good policies and all of your people on board, it is all pretty useless.
My favorite story for that is from when I was an IT worker. This whole office had their computer network updated, and a strict password policy was put in place. Now, they were all used to just logging into everyone's computer whenever to get something they needed. Shared drives were available on the new network, but they didn't want to learn to use them.
Long story short, they passed around a clipboard, everyone wrote their password and username on it, and they hung it on the wall in the front of the office. Kind of defeats the purpose, really. Security requires compliance with the policies, otherwise it just doesn't matter how good your tools are.