Put passwords in all the accounts in the XP server. Any computers wanting to connect to this computer will be shown a login screen. This way, only people who knows an account/password on the XP machine can access any resource provided. Connection maintains until the client PC reboots.