Steve Berry

UK

Infrastructure Architect

What happens if there's a config failure on the clients ( Group Policy for example ) and firewall settings if using MSs default firewall product aren't applied ? Oops - there you go Mr/Mrs Hacker.
When was the last time you looked at an XP box and how many Security Updates MS have released ?
There'a also the question of extremely heavy reliance on constantly patching 18,000 external facing boxes.
What happens when MS release their next client ?
Going to put a helluva lot of strain on your Win AD admins.
Try covering it up all you like. Basically what you're doing just isn't very good/doesn't make a whole lot of sense.
You're not concentrating on the root cause of the problem - i.e. your problematic network.
You're making a bad problem even worse.