Not really, proper tooling is done at the initial phase of a project by experienced people and usually involves senior devs.
I have yet to work anywhere that this happens. Usually it's a case of "here's a standard machine, go install the stuff you need, install images are stored here". Obviously there's no concept of a lock-down involved in these cases.
The one place I did work with a proper lockdown, I couldn't fault the process, it's just that the sysadmin chose defaults for everything that were not what I'd choose and it was highly irritating. A perfectly valid set-up, just wrong for me. Even there, the devs ended up with admin rights to our own machines.
HP has re-introduced Windows 7 as an option on a lot of their PCs "due to customer demand".