Build the system out from a blank drive. Make sure its totally 100%
disconnected from any internet source. Install your Service Packs and
hotfixes from a trusted CD. Trusted meaning - one that you know isn't
infected with anything. Afterward - pick up on the advice of the other peeps
and either
Actually my environment is over 99% windows workstations. We access all of
the *nix boxes via SSL from W2K/XP. We've got *nix boxes for everything from
Web Mail, to Databases and IDS's... you name it (there are also Windows
counterparts to each as well). Point is, all of our Admins / Engineers