[khedoros1]

One company installed a root CA and issued the device with admin locked down...but IT would give a developer permissions just for being a developer, so that was the first thing we had new hires do. If you ran another OS, you had to install their root certs, or the internet was basically unusable.

Another company validated that a few things were installed and running (virus scanner, new enough update level, maybe a couple other things?) to connect to VPN, but otherwise didn't restrict control over their machines.