Hi guys thank you for the replies...
The infrastructure is basically a Dell Power Edge T110 Server (few years old now). Originally we were running normal hard drives in RAID1 configuration. The whole setup was very, very slow and when one of the hard drives failed I took the opportunity to upgrade to server grade SSD's and re-install the O/S on to a VM (incase anything went wrong with the server O/S - attack/virus/crash/etc it would be easy to restore it very quickly).
We have 8 users in the office, gigabit networking and at the moment the FMS and data are all stored within the VM.
Downsides to this, as I can tell, are that the VM contains everything to do with FMS including DB's/containers/etc. My thoughts were it would be better to just have a small VM file containing the O/S and services like FMS/Sage/etc and have the 'storage (with db's/documents/etc) stored elsewhere.
It is absolutely possible for an attack to disrupt the shared drives/etc but it's, rightly or wrongly, another step down the line for someone else to attack.
I just can't imagine server admins having VM's around the size that we now have that's all!
Maybe a used SAN setup is the way forward?
Rick.