Once worked for a company that in the name of sEcUrItY, deleted Notepad Calc Paint SnippingTool from the Win10 image. All the useful functionality relegated to the Windows Store for Business. But then, they didn't allow VPN access, so no one could get the GPOs to configure the winstore for business.

That company refused to put EDR on their Domain Controllers b/c the 3rd Party Polish company managing them said it violated their contract.

#InfoSec #CheckBoxSecurity #IHatedThatJob