sykonami

Can anyone please explain to me how all this ransomwares work? Ok, they send infected email, some worker opens it and what next? How did it manages to encrypt every other computers on the network? Isn't it should have root/admin privieleges to do such thing? And why is it so hard to prevent? I would really appreciate any answers.