I work for a certain convergent outsourcing company which converges with converging technologies to provide a
... okay I've taken this too far: I work for
Convergys. Every user on their network is an administrator. Every. Single. One. We have 1200 or so employees at my site alone, and we've got over 70 sites in the US.
They use group policy security to control the network, but you wouldn't believe how little thought goes into it. We had a new team form to provide support for a certain now-defunct pacific-coast city's municipal wifi. Because supporting an internet service sometimes requires tools such as ping/tracert/whatever -- they gave us a command prompt. But because they didn't want us having all kinds of access, what they really gave us was a shortcut to a batch file, which started with a choice prompt, allowing you to 'paste' so-to-speak, several commands, such as it would not let you have a blank prompt. It would always have a command, such as
C:\>ping .
Well apparently no one told them that you can concatenate commands. We soon discovered we could just use the batch file to
C:\>ping google.com & start cmd and have an unrestricted command prompt. And since we're all administrators, we can use MMC, and control every other part of our access.
I've since moved past my call-taking days, but I still work for them as an analyst. Of course they still won't let me provide any kind of network security device.