In most organisation the general trend is to have locked down network clients.
The problem comes with what to do with laptops given to teachers and students with special needs.
They can reasonably argue that they need to install ISP software or drivers drivers for home hardware e.g. printers. Teachers may say they also need to 'try out' new software.
What to do? How to strike the balance between enabling students and teachers to get full benefit of 'their' machines and the need to protect the school network from sleep walking malware vectors.