I think it depends. In my experience, this tended to be more of a problem in places that had mixed systems, or allowed people to BYOD. Every place that was running windows exclusively tended to have a halfway reasonable AD setup and at least someone in IT who was intimately familiar with administrating a fleet of Windows machines.