or just get rid of microsoft in the workplace and enjoy the absence of a terrible environment with the addition of fewer attack scenarios, better software and happier users but sad management people, but they don't do work on their machines anyway ;)