Usually this would be GPO-related. If some of the UX has been disabled vs. what Joao demo'd, then that is Group Policy at work. The best source of truth is running the powercfg commands to see what is configured for power settings. It's very likely that a one-size-fits-all laptop power plan has been enforced on all laptops.
@Mark:We have an import CSV file function there now with a nice button and GUI. But beyond importing users, you need to assign licenses (or revoke them) for services. You can do much of this with the UI, but like Greg says, if you want to manually spend hours to configure hundreds or thousands of users, those controls are there. If you're a small business or configuring for a handful of people, then scripting will make less sense. Generally, the bigger your organization is, the more time you can save using PowerShell and scripted commands.
We'll activate Office without the user needing to hit the portal itself, but he or she will be able to log in via the browser to access other services. There are means to lock that down via ADFS restrictions to known computer objects in your AD.