Higher Ed here, private institution. Default for on-prem devices is
default "no" for admin, but the exceptions are very, very many, due most
of the time to purely political concerns. Home/remote issue is default
"yes".
As of today, still, you can get 21.5- and 27-inch iMacs with wired
peripherals. This is an option in your Apple Store for Education
interface; you can contact your rep for more info if you're unfamiliar
with using that. For other models, we've been u...