Not always. It is difficult to hire people with a deep knowledge of complex systems such as the Windows suite and it makes sense, security wise to protect this insured of having chaos in your configurations.

An MS environment is today extraordinary complex and it is very easy to make a mistake setting it up, maintaining and integrating other stuff with it.