I forgot another person who may introduce 'change management' unknowingly in a SBS system.  The LOB app vendor.  Now this is where me and my fellow MVP Dave Nickason are lucky.  We have pretty self contained LOB apps that don't need some add coder to go mucking around your servers.  But most of you are not so lucky.

And when they do want remote access, they don't want to use the built in Remote Assistance tools but instead insist on PCAnywhere or VNC.

As a newsgroup who's seen one too many line of business installer come in and start disabling things and ripping out stuff they shouldn't, talk to your client.  Make sure they know to call the consultant in that handles the SBS box.  Instruct your client to 'freak out' when Copier/scanner vendors ask for administrator passwords, when LOB app vendors ask to install third party programs, when they start removing things they shouldn't.

Get yourself in that Quarterback role of Change Management in that network.