> The one thing that we didn't do (obviously!) was allow automated Windws updates.
> Then again, considering the damaged that some Windows Updates have done to
> desktop machines, I didn't even allow that on my desktop machine.
You have to perform OS updates in some industries. You might disable automatic updates, but that doesn't prevent damage, just that you'll be kicking it off manually.