To my knowledge no Windows based Firewall software can load before Windows initiates the network. I mean the firewall would not have the IP stack to work on yet? I am certainly no expert but that is what comes to my mind when I think about it. All I can say is, if you are still using FAT, upgrade to NTFS and turn on file security for shared resources. I imagine it's only a .500ms lag before the firewall starts after the network is initiated anyway, but why expose the risk for an easy fix? Turn on NTFS to be safe, there is no reason to have FAT on anymore and if you have some older software that needs the FAT, move it to a box on it's own and lock it up. Then tell the vendor he has 6 months to write a new program or get something else. Stiff position but come on, this is 2003!