I've come across a few questions where the user asks something like, "How do I set up a server when the IT department won't let me?" 

Usually the questions are asked by a relatively inexperienced user. They usually require more of a "how-to" than a detailed analysis of a security flaw. 

In [this discussion][1], some people felt that vulnerabilities should be openly discussed, and I agree. I don't think that there should be any censorship based on the idea of obfruscation. 

However, I think that **when it is clear** that an inexperienced user is seeking to **circumvent IT Policies** in a way that may be injurious to that person or that person's company **we should close the question**. I think that as a community of system administrators we owe it to each other to set a good example for IT Users. 


  [1]: http://meta.serverfault.com/questions/192/ethical-questions-about-hackers-cheaters-and-lusers