Workflows are provisioned as features at the time of SharePoint Server 2007 installation. Out-of-the-box workflow features are controlled at the site collection level. By default, all out-of-the-box workflow features in SharePoint Server 2007 are set to active except for the Three-state workflow, which is set to inactive and needs to be activated separately. This means that workflows are enabled at all sites and subsites throughout a site collection and can be created in document libraries, lists, and as part of content types. Therefore, part of your upfront SharePoint farm design will involve deciding whether to allow workflows and locking down the ability to create workflows at the site collection level.