At no time will we allow reusable passwords to flow unprotected outside of our network. But proper support is difficult and requires vigilance. Unfortunately, we are competing for attention and compliance. Corporate computers are provided for corporate business only. We know that people will use them to shop on the Internet and to send e-mail to Aunt Ida and Uncle Pete, but we don't want them running a second business from it, nor do we want it to be used as the household Internet machine.
Fewer hands touching the computer mean fewer things to worry about.
Do not use remote back-up services. While we want users to back up their computers, we do not want confidential data in the hands of a third party, and passed on unencrypted channels. We should inform users of the dangers and provide easier and more secure ways for them to safely back up their data. Where exceptions are made to this rule and people are allowed to access work e-mail from home or the road, we need to make the process for doing so clear and easy. Avoid remote connection via kiosks.