Just a thought - Is this viable option? Two servers using standalone install and 8 workstations using Policy manger and client secuirty?
Why not, if it's fine for the admin(s).
Just one note. Server Security Web UI doesn't cover all existing policies tuning possibilities, while PM Console provides them for the full set of policies.