At my two previous employers, that's exactly what they do. All machines are completely locked-down. I suspect this is not unusual at large, more traditional corporations.