I agree, we already disable windows xp firewalls in the ris image, and at gpo level as well.