I will say this until it is no longer true:If a non-admin user clicking on a link or opening up an infected word file damages anything on your network your security is shit.Periodt.