if it's a large enough company, expect them to have systems administrators (sometimes called systems engineers nowadays) to exert control over their windows systems using either active directory or azure iam policies.

there are multiple ways to get a linux system to comply with those policies; but that doesn't matter since they'll make the case to management that the extra operational costs of either getting your system to become compliant or providing you with support will hurt the budget and/or suck up extra bandwidth for support.

your best bet in such cases are to offer written agreements that you will never seek out IT's help and you will take full responsibility if you're not able to get your work done because your linux system and provide a plan written down for each eventuality you can think of when your linux system doesn't work as expected.

i would also expect your manager to reject your request despite these efforts unless you're a highly enough paid individual contributor or have a special enough relationship with upper management.

It's funny because I'm not allowed to use a Linux machine as a main system but all the appliances I build run Linux so I built myself one of those machines to be able to test my other machines because my windows machine is so locked down I can't do anything with it. So every day I have to ssh into my Linux test bench to test our products it's annoying

Linux VM with 90% of cpu and memory. Use it for almost everything. Have it configured as NAT so it can share the vpn connection from the host laptop.

I work for a large state university and run linux on my office machine, despite the fact the IT office dept doesn't officially support it. I told our IT guy once what I'm doing and his response was, "cool." Of course I'm totally on my own if anything goes wrong. It helps that I'm a prof and most of my on-campus work doesn't involve much time on a computer, aside from basic web and documents stuff. tldr, in my case I'm able to just do it without asking anyone's permission, and it's worked out great for several years now, but a lot of jobs aren't like that obviously.

In my previous job I ran my main laptop with Linux. Pain points:

• MS Teams liked to crash on screen sharing
• o365 email and calendar works best on Evolution, but still is not perfect
• meeting rooms often had special usb dongle to connect to the screen. That never worked on Linux.

Overall it was glorious.

It's better to ask forgiveness than permission. And forgiveness meaning "I didn't realize I couldn't do that"

How it's set up depends on your business needs. We have a few hundred, and ow they're set up and managed is defined by a dozen or so groups. Base image to deploy, then ansible and config management to set up the roles.

Users are generally authorised via AD using sssd. Some have very specific Groups which have normal user access and occasionally sudo privs for specific commands. SSH, RDP or physical access.

Our sysadmins have local users with root privs, but most administration is done at scale using ansible or Uyuni.

Like everything, least privilege is the best way. AD allows us to quickly control access if someone leaves or is compromised, but it could equally be done with any central LDAP system and groups.

Many orgs mandate this. You'll be fine.

I used to roll out mint xfce edition or Qubes to our staff laptops, unless an employee asked for a specific distro. I think some used fedora.

Don't use flatpak; its a security risk.