The industry has evolved toward blacklisting over whitelisting on devices. It reduces IT burden significantly should problems arise, and you should index toward trusting people to do the right thing.
Overall, this approach is better. When I started in engineering back in 2000, it was still a debate as to whether developers should have admin on their own machine.
Overall, this approach is better. When I started in engineering back in 2000, it was still a debate as to whether developers should have admin on their own machine.