In addition to the other things mentioned, some very sensitive applications in my organization must be run from a virtual desktop, which is itself must be run from a locked down corporate laptop.