Re: What's the real danger ?
Sounds like your shop is more smallish but Enterprise IT can't really think like that. Relaxing security behind the firewall too much has gotten an awful lot of companies in trouble. Often a company's biggest threat is a disgruntled employee or insider. Granted an unpatched WS2003 is not likely to be their juiciest target but in general its bad to assume no direct internet connection means safe.