I'm slightly terrified about the thought of 1000+ windows endpoints not on a domain (assuming single org etc etc)