Install the service pack before you put it on your network! Due to a miscommunication we put a w2k server live on our network (unpatched). It only took 8 minutes for the server to be infected with nimda.