Re: One thing I forbid, unless there are good reason for that...
.....this is okay when you provide the requisite infrastructure......
For example - do you have a jump box available on your VPN so your users can wake their PCs up if they are working from home - or a windows roaming profile so that all their applications are available on a system they can RDP to ?
The main reason I leave my windows PC on all the time at work is if I need to do something from home - which happens more than Id like....
Being a windows BoFH is not a great plan for productivity.....and user friendliness in an organization and its precisely these dumb ideas of over-protective sillynesses that cause people to find even more stupid ways around things.....
There needs to be a little sence and sensibilities - weighing up both security and productivity - its not about the 30secs someone wastes sleeping their PC, its about how folks use their systems...and how silly little rules harm the company.