hopefully the IT department pushes out uBlock Origin with whatever browsers they require people use. I used to push it out to several customers with the Chrome GPOs... although I know it doesn't work in Chrome anymore
uBlock Origin requires permission to read and alter anything on any website. Although I trust it, and I don't see an alternative for something like an ad-blocker, I can see how that would be a deal-killer for corporate IT.
Of course they won't do that. That would require companies to admit that ads are a bad idea.