Yeah - Windows enables remote access by default. I don't know what the heck that's about. If you right-click My Computer on the desktop, and click Properties, then open the Remote tab - you can see all the settings in there. I always disable it on a Windows box, too.
Also, installing all the updates via Windows Update would ensure that you have all the fixes for exploitations Microsoft has become aware of and resolved.