@Pjcoyle Use a network management service they said, it'll be better they said.

(Honestly I still believe that's true, better to have one big vulnerability to patch or remediate in one target than twenty five thousand weak passwords and vulnerabilities spread across 95 different subnets...)