In my previous jobs, we had to get the account setup first before giving it to the user. We would go in and sign them into all of their tools as we were transferring their data from older machines.

The point is that few things are the best case scenario. That’s the issue. They seem to think computers work like the government. They’re a tool. Like a hammer or a paintbrush. The idea of trying to attach an account or physical machine to a person is silly because it’s inherently transient. Locking them down further only serves to make the hammer less useful.