Security for WAMP installations?

There's been a lot of discussion about how to set up WPMU on LAMP servers, but I haven't found any tips for making sure security is set up correctly on a Windows box. I'm running XAMPP and I'd appreciate any suggestions.