On our system we use SA,Mimedefang, and SPF to reject a lot of messages before they hit the user's mailbox. Procmail just isn't a solution if you have to support people who aren't interested enough to maintain it.
Heck, half my users won't even hit the command line to change their own passwords. I suspect it is the same most other places. -- Daniel Taylor