As someone who is currently having to take away people’s local admin rights along with a ton of other privileges: it’s not like we do this for fun, we have compliance goals to reach that were agreed to by higher ups outside of the IT department in exchange for public funding (we’re a public institution).