Group Policy allows me to hid my network neighborhood, etc but certain programs, etc when you go to open/save, it launches their file explorer / network browser and I am able to browse all the network ...
If the only reason using Server as a workstation to provide TS access is "VERY bad security and VERY bad for your network" is because IIS is installed by default, even though it can be either ...