Real World...
A very few of our 100 or so users have local admin rights on their machines, I'd prefer it to be none but there are a couple of finance applications that won't run correctly (blame the banks for that). That does mean we have to assist with software installs of course, but that's the whole point, we can check what they're doing.
GPO saves us having to install printers manually, means we can change home pages, etc. centrally.
Our ERP system is SQL Server based so we've got MS anyway (if we started from scratch we'd go SAAS but we've got too much investment over 15 years to change).
Noop, we won't be going Linux on my watch.
Biting the hand that feeds IT
