I understand the need for security in a corporate setting. When my brand new company laptop has so much nannyware that it's slower out of the box than my 20-year-old netbook that I dug out of a box in the attic, something is very wrong, though.
I firmly believe that IT departments come up with new ideas for "hardening" their default OS installation and implement them in a vacuum. You end up with a barely-usable machine because every single IT person with a "good idea" has infected it with their software package of choice, and nobody is considering the cumulative effect.