That somewhat depends on the organisation - the high ups in ours just ignore IT directives, and we can't force things like that on them. ****ed up, but there you go.