When the RPC DCOM worms came out, I patched our server systems immediately. Unfortunately did not patch our client systems because, in theory, they should have been protected by our firewall. This worked for a week until some clueless user plugged in their infected laptop and it started hammering our systems. Luckily everything was pretty much contained in about 3 hours. It was a pretty interesting day yesterday, nothing like a crisis every once and a while to keep an admin on their toes. Now I get to think up policies and technological ways so that this doesn’t happen again.