Yes, yes, yes.
IDS is the way to go, in a mixed environment, especially so (hey, that rhymes! :)
And take this opportunity to document everything you do to "lock down" the system(s).
---------------------------------
A stupid despot may constrain his slaves with iron chains; but a true politician binds them even more strongly by the chain of their own ideas;...despair and time eat away the bonds of iron and steel, but they are powerless against the habitual union of ideas, they can only tighten it still more; and on the soft fibres of the brain is founded the unshakable base of the soundest of Empires."
Jacques Servan, 1767