More often than not we have a reason for it. I can say I try really hard not to be HR: We tend to look the other way on any activity that isn't a security risk.

More often than not we have a reason for it. I can say I try really hard not to be HR: We tend to look the other way on any activity that isn't a security risk. Though sometimes one can turn into another: I once ignored someone's attempt to run a game on a PC of ours. Turns out it was a hacked version of a game which had malware injected, and when it got blocked, they tried installing VPNs and Wireshark to try to get around our security methods... If you have any questions about presumed oppressive IT policies, I'd be happy to give you my take on them. Some folks do indeed go nuts with it, but often I think the reasons why just aren't obvious at first glance.