Jim Wildman (jim(a)rossberry.com) said:
I agree with Alex. If nfs is being used, it is because there is a
knowledgeable person around to set it up. (Is there a client included
by default with MS systems?). Better to have it off and close one
more potential hole.
Counterargument: If the default firewall that already protects you
is changed, it is because there is a knowledgeable person that changed
You can't have it both ways.