well...
our gpo sets workstation firewall disabled when connected to domain, to ease administration.

anyways, I see no point in disabling the service.
you never know when you need it and if you have firewalls & AV in place there is no risk either.
disabling the service is imo same as disabling server service on servers cause someone might be able to access the sensible data.

just my 4BUSD
_________________________
!

download KiXnet