Thank you for the reply, Terry!

So far what we've done is built the box (OS, Norton, BlackIce, etc) in its own isolated, protected domain.  This way the NewBox begins its service...