I would use port knocking on the mission critical points to lock down access to the critical servers/comps........on top of the honeypots, I would turn them into stinging pots(respond to the intruder...