Often, those guys are allowed to break security policy for various reasons. I know - I used to be one of them! :-)

You also need someone else with some power to agree that the current anti-virus administrator is a) probably the wrong person or b) doesn't have the access or authority or knowledge to do their job properly.

Fixing security policies is a long and slow task, especially when you're not in security. Best not fight that one now.

Wade.