One thing that the Norton Security Check mentioned above found on my setup that I wasn't fully aware of was one "visible" port in my firewall.

Ideally, your firewall should make all ports on machines behind it invisible to outside queries to your address. Unfortunately, Win2K requires one port to be visible in order to be functional on a simple LAN, and I'm stuck with one Win2K machine on the LAN (until I can talk her into upgrading). The firewall blocks access to the port from outside quite effectively, but it would really be better if the port couldn't even be seen. Invisible is the goal.

John