I am working with a client that has no central identity provider (no
AD/LDAP, cloud, etc.) so all accounts are local and admins. They are not
using FileVault (don't get me started) at this time. And,
unsurprisingly, most people are working from home....