One thing I forbid, unless there are good reason for that...
... is to keep people PC on outside working hours. Exactly because I want to make the window where a successful attack can go unnoticed for too long smaller. Moreover is often just wasted power, and most desktop/laptop hardware is not designed for 24x7 operations.
Sorry if people have to reopen a few application and files... hibernate would work anyway.
Biting the hand that feeds IT
