How do you guys react when users disrespect/try to walk over you?

>The problem is that a lot of the faculty here are resistant to change and they blame me when something goes wrong. "everything was working before, but as soon as you made changes it stopped working" Also stating that me enforcing policies on their computers is "ridiculous". An unenviable task to be sure, especially given the nature of the estate you're working with which is, I'm guessing, all over the place and held together with a mixture of VooDoo, Bubblegum and sellotape. >How would you guys go about this situation? Right so question is: who's your boss or chain of leadership?....is it Finance or anyone that's got a _vague_ idea of compliance, security or legal know-how of what having such a _wild, untamed frontier of IT f*ckery_ means for the establishment?.... Hopefully you do, as then we can work with it. First of all I'd get a plan put together - what do you _want_ and _need_ to do? Is the employer meant to be ISO270001 compliant? Are there standards which should be met and in place that aren't? If there's goalposts and time-sensitive stuff to make sure you keep valid for, that matters. Establish a baseline for how things _should_ be and put realistic goals forwards for how long it'll take to take the "hops" over the stepping stones to get there. Is AD in place? If so, what's the state of it - is it up to date and on a modern DC or something from the late 90's? Do you have any form of contract or agreement with any vendors that provide licensing for Windows 11 and other software products including O365 or.....whoever/however you run email and other services? Note it all down, get a matrix established of suppliers, vendors and quotes put together for man-hours as well as actual cost of licensing to get it all up to scratch. Do your job, but where time permits establish the above - where you locate risks, threats and hazards to the company, note these down with detail. If company data is able to be carried out on a USB stick, staff using personal email, have local admin rights and can walk in/out with personal devices, how secure the network is and if there's any kind of firewall or protection....the whole shebang. Once you have it together, make sure you do two things - first of all get it in _writing_ so you can maintain the chain of comms to your boss: I've found XYZ vulnerabilities, points for improvement and _here's my manifesto for how to get it up to date_ (insert plan here). You can do this in bits, or altogether - the former is more likely to work as you can do things in chunks to make it approachable rather than "we need to spend ~£1.5 Million to get up to scratch", as it's easier to swallow "if you can give me £4000 I can get all the laptops on the same spec, in Intune so they can be remotely managed/assisted with and also with the latest/greatest Windows improvements and jingle-jangles" (or whatever shiny-key-Magpie appealing things you can come up with). You don't want to make enemies of all your colleagues, but equally need to do your job and you'll be No.1 scapegoat for any and all failures, explosions, small fires and/or unknown smells/stains they can pin on you - so the more you get in writing to acknowledge what you've found and your directives on how to deal with it, the better. You've noticed X staff with personal devices on the network, or that they do work on? This violates ISO270001 and also is against best practice - there's risk of data loss/compromise and if our insurer hears about it will invalidate our cover. I can mitigate this risk by implementing XYZ measures which will conservatively take Y timeframe and X cost. The more buy-in from everyone you can get, the smoother things will be - so if you can establish _what_ people need and _how_ they work that also helps, but is a time-intensive process unless life is made easier by managers being able to directly tell you "my department need to use X software to accomplish their job and nothing more". It's a great way to get very familiar with a lot of processes, methods and technologies quickly - as you'll hopefully soon be knocking out Intune policies, automatic installations, Azure groups and dynamically controlling things but it _will_ take time, _will_ take a lot of planning but _will_ make life easier for you overall.