My employers have made AD-account for me. For explicitly use for work. I don't see no reason why Apple shouldn't have similar work account by default inside their own systems. Not having one seems like failure of corporate processes.