Comment by Iwillgetby

As someone said in the reddit post.. If my daughter figures out how to install a kali vm and then gets a reverse metasploit shell on the server, I would be so proud I would probably cry.

Key though is corporate infosec is similar to home infosec. If the user has local admin access, then the user can change any configuration.