New
#10
Yes it can and it normally is. In my experience (banking) in a corporate environment you sign on with your domain credentials and you are given whatever your IT dept decides. This may or may not link to a MS account. Normally not and certainly not your personal one.
In exactly the same way you would not have authority to download some .exe and run it. You'll be lucky if you are allowed access to the internet at all and certainly USB devices will be blocked by group policy.
Anything outside of that policy you will not be allowed to do without it being signed in triplicate. As an external consultant I am normally given Wi-Fi internet access immediately, access to their internal network later and access to their domain last.
As for the users - they don't care as long as all the buttons are in the same place as they were in 1987.