I doubt my helpdesk staff will support my PC. I manage the company including helpdesk PCs from my PC.

It will probably be last PC working when the dummies in that department manage to get spearfished and all windows boxes are encrypted.
There’s not a lot you can do against idiots with Domain Admin credentials other than off-site backups (on a non AD joined Linux PC of course).