Interesting--when I was in IT, the last non-defense company I worked at did allow local admin access, and it seemed to go reasonably okay. We definitely fielded

Interesting--when I was in IT, the last non-defense company I worked at did allow local admin access, and it seemed to go reasonably okay. We definitely fielded more support requests because of it but nothing too crazy. Granted, that was a decade ago and at a relatively small (~400 employee) company.