In the big picture though, having most people on a wide variety of out dated, un-patched versions of the OS is far more of an issue than just putting in a few workarounds.
We've all had that moment in the late 2000's when a friend/family member asked us to look at their PC because it was slow, and we discover its got a release day build of XP on it without any Service Packs!
So like I said, if this stuff is so mission critical it has to stay on all the time, why are you running it on Windows 10?
You can't have it both ways so which is it?