My IT department likes to install antivirus software that makes it impossible to do your job because it will scan every compiled object file, inflating compilation times by an order of magnitude, even for distributed compilation jobs.
Or stupid “workspace management” software that will randomly uninstall work-related software and / or reboot your machine whenever it pleases.
Luckily I can use Linux at work, otherwise I’d have to either quit or tamper with my work machine to do my job.
And yes, the IT department knows. But they are always “understaffed” to fix stuff. Curiously, they are never understaffed to roll out new stuff that doesn’t work though.