TIL. I mean, the headers on most boards are easy to find, so a few paperclips and some tape could be your USB port. And most built-in peripherals use the interface so it probably isn’t disabled. The rest depends on how thoroughly their IT vendor locked things down.