Usually in configurations like that, the org likes having the ability to scan user home directories at will, for a variety of reasons. In my experience in those kind of networks, home directories are often on a centralized NFS/CIFS server.