I think this may need a bit more planning to be honest. Its hard to give you propper advice but I would setup a propper domain. 2003 Server with 5 CALs is cheap enough, RAID store and a tape drive. This would give you the base for a fully complient data store for any future contracts.