Our organization still has a sizable number of Windows XP machines due to legacy application compatibility issues. That said, we want to harden Windows XP as much as possible. One expert recommended using the Microsoft Enhanced Mitigation Toolkit Experience (EMET). How does it work, is it worth the effort and are there any negative ramifications?