IT department didn’t just cut stuff off without warning though. Depending who it was and their role we gave varying (all short though) notice periods of the cutoff.
Also we let them know we would look for a safe way to enable whatever function they needed for their work.
Often it was engaging with the new to us vendor to see if their product had on prem version and/or they had (or could complete) various security audit things that met our requirements.
Anything that met the bar would be put into the self serve portal the end users could dip into to install approved things.
#sysadmin
@scuttlebutt@farticle.cloud