Kill the domain, move them to Google Apps (*cough* G Suite) and don't look back. No servers to maintain and workstation problems can all be fixed with blast-off-and-nuke-it-from-orbit approach.