Our record was less than a workday for a developer to get infected with malware after their machine just got re-imaged. After that everyone lost admin access by default unless they had an exception since he was not the first that month.