IDS is the way to go, in a mixed environment, especially so (hey, that rhymes! :)

And take this opportunity to document everything you do to "lock down" the system(s).