Sounds like a good use-case for a VLAN. By all means let the XP machines communicate with the inventory server and the blueprints NAS, but don't let them route

Sounds like a good use-case for a VLAN. By all means let the XP machines communicate with the inventory server and the blueprints NAS, but don't let them route to the Internet.