Re: "Personal" computer no more
"least privilege is something *I* impose upon my user base"
There's a difference between you doing that & $vendor doing it. In your case the computers are owned by and operated on behalf of your company who's paying you to do this. It's like Dave123's PC situation writ large - the owner is making the decisions according to their needs and remaining, via you, in control. The problem with vendor-made decisions is the vendor taking control of kit they don't own.
Biting the hand that feeds IT
