Ars Technica has posted up a guide "Securing Windows 2000: First Steps".

In the world of persistent Internet connections, the security of your computers at home and in the office has become drastically more important. Even if you have no files that represent a risk to you (i.e. personal or financial data), I am sure that you don´t want your finely tuned instrument of rocket launching death being mucked up so someone can use it as a staging ground for DDoS attacks, or a web server for their warez site. I´m going to outline some basic, "must-do" measures that you can use to make your Windows 2000 workstation less appetizing to the random Internet bandit.

These measures are intended to make it harder for a would-be perpetrator to break in, but the savvy security-conscious user will also realize that new exploits are constantly being discovered. A system that is safe one day may be easily compromised the next. A good way to maintain your system´s security is to keep up on the latest patches from Microsoft. You can do this with service packs or hotfixes, and by subscribing to the right sorts of information sources. There´ll be more on this below.

Read more