Really? I work for a <50 employee manufacturer/distributor, and we're pretty firmly locked down. If people want to _update Java_, they need an admin password.