"I say this having a job that would make most 'IT engineers' weep - 500+ devices, 1500+ users, educational establishment [IE full of non-IT savvy staff and loadsa wannabe hackers trying to kill your DCs every day] and only three of us to run the whole lot."

Brother Anonymous, my heart weeps for you - and no, I'm not taking the p. I was a techie support rep for Burroughs (remember them?) 25+ yrs ago, and I must have been one of the first to use the term "Liveware error" in my call reports. When I was occasionally berated for not making an installation totally idiot-proof, I had to remind my boss of just how inventive and imaginative idiots could be. Still, in those days we didn't have hackers to contend with - unless you count the inevitable director's 14yr old offspring, who thought he was a computer genius because he'd played with a TRS-80 or Commodore PET at school...

Hell, I almost miss the days of wood-burning, steam powered computers when 128K RAM was just showing off...