Yes.
But this is also because your system administrators are incompetent.

There are myriad other ways to accomplish the same thing, but this is easily rolled out via Group Policy.
Yes.
But this is also because your system administrators are incompetent.

There are myriad other ways to accomplish the same thing, but this is easily rolled out via Group Policy.