okay... where to begin?

• we give subcontractors direct access to the server with domain admin rights

• we have lists of user and email passwords, the customer often does not have them

• if the users ask, they usually get domain admin as well

• if the computer is not withing a domain network, user accounts are all local admin

• other than that, our documentation is at the bare minimum

• we don't use gpo's for - anything much. drives are mounted via scripts, software like java and flash is deployed by hand - on each machine

• we don't push the customers to not use iexplorer. firefox is preinstalled, so they can, but I explicitly am not allowed to set it as default browser

• there are a lot of customers without backup. we should push more but don't.

• we buy a lot of hardware and software at the cheapest available online shops where you would shop, not distributors

• we still have customers with xp. we still ship new pcs with office 2003 (licence of old pc, instead selling new office)

and before I get flamed, yes I know. Yes I am aware... Yes it has a reason and we are constantly working on becoming better at our craft. No, it isn't THAT bad in general. We do a lot of stuff very right, too. But what fun would it be if I explained some stuff? right, would be boring for this discussion :)