I’ve touched 2 M$ systems today. Ran iexplore.exe as Administrator from a cmd prompt on one to get some needed files downloaded because ftp.exe was b0rken and no working passive mode. It should be air gapped. Sigh. All the BigAssCorp did to isolate it was remove the DNS server settings. I can imagine them saying: "That’ll do it" and slapping the console.