I can also explain Microsoft’s straglehold on enterprise/government/institutional IT in two words: Group Policy. Nothing - absolutely nothing - from any other OS maker comes close to the granular level of configurability, customisation and flexibility that comes with Group Policy, not even ChromeOS or iOS.