Step 1 at any organization: uninstall the corporate spyware
I've seen "official IT" give people laptops without basic drivers installed, and the screen not running at native resolution! I've even seen shadow IT maintain their own install images to re-image every system with...