[Arainach]

There are many reasons.

* Preprovisioning - devices have the right certificates and know about your corporate networks. They have the necessary apps and just work.

* Tracking - if a device is lost or stolen, monitor where it is and remotely lock or wipe it

* Monitoring - have a log to audit if someone does something malicious

* Security - reduce the chance of your employees installing malware, spyware, etc. whether by accident or intention

* Locking things down - put gates in the way of bad actions like copying sensitive data into public apps or clouds. Even if you're unable to block everything, attempts to block remind honest employees and provide strong evidence that anyone who proceeds was intentionally violating policy and should be fired.

Etc., etc.

[dabockster]

Bigger one:

* Predictability - eliminating the number of unknown factors that could cause a person to have issues using their computer. Reminds me of how a secretary I serviced was somehow able to install Google Desktop back in the day, and how that caused a massive argument between my boss and theirs when their computer needed to be re-imaged. Most IT approved programs are known to store user data in known locations on a computer, which makes backups and restorations very easy. Stuff like Google Desktop did not do that, which means likely breaking someone's workflow in the re-image process.