Such bravery, putting XP net-facing in such numbers. Of course they keep all the machines patched...
Nobody said anything about the machines being Internet facing. All connections from Schools to the Internet by the links provided by Norfolk LEA are one big VPN. This then goes into a server farm of proxies at baynard house provided by BT then through the BT networks to the outside world.
Information on standards etc... for Schools can be found on the DFES website.
I know personally that as a School our budget isn't big enough to include upgrading and replacing machines this money has come from the Government via NGFL funding.
Cheers,
Ben Norcutt