I am part of the IT staff in a hospital.
Once I needed a MR-Scan urgently, but the machine is always occupied and so I had to wait 3 weeks to get an appointment.
I decided to buy a MR by myself and took pictures from myself and some other patients of the hospital, but after comparing the pictures with ones from google images to find suitable medication, the hostpital staff said, I am not qualified to prescribe medication....should I ignore them and order meds online?!?!
My fellow slashdotter, this (satirical) story is only to convince you, that by setting up a server by yourself, you will end up in a big pile of poo-poo, if something goes wrong.
Especially in health care, where data is higly sensitive, NOBODY should be able to bypass security policys....and this is what you do, by setting up your own server (without putting it into the DMZ and ignorig other security principles as well)
If I would be working in your IT dept. I would shure find a suitable LART which could be applied, so give your dept. root access, and I am shure they find a way to get rid of your server.