one computer with xp used for internet access and only accesses the system AC (if we need to and we never had to yet) by rdp
You may have a good reason, but I am not sure I understand the logic behind a single computer dedicated to RDP.
FYI: I think this just may be my inadequacy, but posts with multiple quotes are difficult to follow. But, that just may be I.