Windows XP connects to Microsoft's computers, or expects to be allowed through the user's firewall in at least 16 ways.    Microsoft Windows XP is dependent for its operation on other computers that the user does not own and cannot control.
 
Here is a (probably incomplete) list of ways Windows XP connects each user's computer to Microsoft's computers, or expects to be allowed through the user's firewall:
 
   1. Application Layer Gateway Service (Requires server rights.)
   2. Fax Service
   3. File Signature Verification
   4. Generic Host Process for Win32 Services (Requires server rights.)
   5. Microsoft Direct Play Voice Test
   6. Microsoft Help and Support Center
   7. Microsoft Help Center Hosting Server (Wants server rights.)
   8. Microsoft Management Console
   9. Microsoft Media Player (Tells Microsoft the music and videos you like. See the February 20, 2002 Security Focus article Why is Microsoft watching us watch DVD movies? [securityfocus.com].)
  10. Microsoft Network Availability Test
  11. Microsoft Volume Shadow Copy Service
  12. Microsoft Windows Media Configuration Utility (Setup_wm.exe, sometimes runs when you use Windows Media Player.)
  13. MS DTC Console program
  14. Run DLL as an app (There is no indication about which DLL or which function in the DLL.)
  15. Services and Controller app
  16. Time Service, sets the time on your computer from Microsoft's computer. (This can be changed to get the time from another time server.)

Windows XP doesn't crash, it becomes less usable.    Windows XP doesn't have the artificial GDI and User resource limitations of Windows 95, 98, and ME. All of the installed memory is available to the Windows XP operating system when it needs it. However Windows XP becomes shaky when enough programs are loaded that all of the installed memory is in use.

Windows XP may provide no local security.   Managers are being allowed to believe that Windows XP is secure under conditions in which it isn't secure. Since it is necessary to supply a password, the impression is created that there is no other way of gaining access. That is not true. Neither Windows XP nor any other operating system provides security against an attacker who has physical access to a computer and can start the computer with another operating system.
 
The administrator password can be changed.   A product called Locksmith [winternals.com] can change the administrator password on any Windows XP, Windows 2000, or Windows NT system. This means that an attacker can have complete control over the computer.