[philbarr]

The problem is that some of these big companies outsource their IT. They don't want to upgrade from, say, IE6 because they know it's going to cost them a FORTUNE.

I know of at least 2 big blue chip companies with this problem.

In fact, I once had a requirement that the software we write have it's own independant auth mechanism and NOT be linked to Active Directory, "because it costs us thousands every time we ask to add a user or change a role".