Situation: Dentist office. 5 PCs: 3 XP and 2 Win 7.
The dental office software runs on a Win 2003 server. The three XP PCs are used 90% of the time for the dental software. The dentist does not want to get rid of them. Doesn't care about XP retirement. They are all 7+ years old and upgrade is not an option.
The office is going to have a MAJOR renovation in a year. Everything is being replaced including the computers. They will be going to a Mac based solution which is why he doesn't want to spend any money on this. (Can't say I blame him.)
I'm thinking of setting the 3 PCs to a static IP and then blocking all access to the WAN (both ways) on the firewall for those IPs. In affect turning them in to dumb terminals that only run the dental office software, MS office and printing. They really don't need to do anything else. The users don't have their own email. There are only two email addresses for the whole office and they are already being handled by the two Win 7 PCs.
The staff is not tech savvy at all. There is no risk of them modifying settings to get around this.
What do you think? Is there a risk or problem I'm not thinking of?