Local Administrator Rights

Has your organisation removed local administrator rights on all end point devices for all employees that do not require it?

Yes. This is managed and enforced via Mobile Device Management, JamfPro.