Also don't underestimate all of the background services that the IT department loads: email certificate managers, VPN client, DLP client, backup client, endpoint protection, etc.