Example: Users want to use Sticky Notes for quick note taking. They don't like other options, they want Sticky Notes.
However, Sticky Notes normally stores the information in a SQL db that can be read with Notepad++ with little trouble.
Telling users not to store passwords on there is all well and good, but they will still do it and even if we punish them, they still put the company at risk.
Can you secure Sticky Notes such that they can't be simply read with an editor?