The third type is the os admin who doesn't want this at all because they now have to figure out how to disable it via group policy