What shocked the piss out of me...is when I installed sp2 on a box on a domain today..and it allowed file and print sharing through the firewall, from ANY source by default. It didn't even restrict it to the local subnet. Now that's scary.