>I wouldn't disconnect Black Ice (I use it on one of my servers) but configure it to let the XP workstation have the access it requires instead. Unless the server has not outside connectivity? Then it might not hurt to disconnnect it, of course that depends on the users... Are you using the server version of Black Ice or the workstation version?
>

I agree here; we've simply excluded our local subnet from limitations of our own firewall (we use SonicWall hardware for router/firewall/VPN functionality.)