Comment by karlkloss

That's how we do it here, because we have decades old production machines running Windows XP and other vintage software. There's a completely separated production network, wires only, no WiFi, that doesn't have a connection to the office network, and is managed by a separate department.