I've seen contract technicians; modify the regular MMC in Home versions of Windows, to enhance the security of those operating systems. Of course that was strictly on the local machine. This is rather off the subject from professional domain based IT work; but I was pleasantly surprised at this.

Thanks for the Do-Jo tip! I can see we had conflicting policies in the past, with local and group consoles; glad to see this suggestion!!