Not enrolling work devices into IT policies actually goes against your encouragement to separate your work/cloud client and a 2nd computer/non-work things. Hav

Not enrolling work devices into IT policies actually goes against your encouragement to separate your work/cloud client and a 2nd computer/non-work things. Having rigid boundaries encourages this separation, and I don't mean overly strict IT policies. I think you can easily allow people to listen to their music apps and watch netflix, without opening the floodgates for games that require kernel level anticheat. IT policies should be as simple as possible, even an app whitelist coupled with preconfigured browser is plenty. You wouldn't even need to monitor them at all this way.