That's why things such as selinux and similar exist that can limit what even root can do on the system iirc.

So yes provisioning would be possible but the IT department would basically need to lock the device down to a symbian state.