And even more interesting the response time for that change was very short. Honestly, I had supposed it will take days for a large company like Microsoft to do so.
1. Business users. So unbelievably locked down it's ridiculous. Anytime they ask for access rights it's "can't, because of audit".
2. Application IT users. As locked down as possible while still allowing them to somewhat do their job.
3. Infrastructure IT users. Domain admin rights with their standard user login. Ability to bypass any proxy server restriction by default.
It's basically the worst of all worlds. The business users and application IT people can't do anything in the name of following "security best practices" while the infrastructure IT people (including the business analysts and non-technical people in that group) have carte blanche because "they couldn't do their job without it". They don't even follow basic security practices like using a non-privileged account for everyday use and having an elevated account for when they need to do something. It's a complete mess.
So thinking about it more - the infrastructure IT people make instant changes all the time.