“I come at this from the point of view of a Windows expert user “
I come at this as the owner of a security company who tests government, healthcare, and financial institution systems for security and compliance with security requirements.
Somewhat different approaches. I also come as a developer specializing in HCI, so usability and UI efficiency is a big thing for me. So you're one of the guys doing the DIACAP audits, huh? Those are fun to go through if you're ready, a nightmare if you're not.