Quote:

Why have microsoft done this!?





Because more and more Companies have asked for better security on the Desktop.

Being on the Domain you should be able to handle this with a GPO script.