I have set up FTP on my file server so that way family can get at pictures and such, and I can access my files from home or school/whathaveyou.
I've:
Removed Anonymous access (you have to have a user account and pass)
Set it to Read Only. Can't modify or delete anything.
Set up logging IP addresses
Account Lockout after 3 attempts, with 30 minute renewal.
Anything that I've missed?
I want to keep it as simple as possible for the girlfriend/family to get on, so I've used my no-ip that I've used previously so they don't need to constantly get/remember a new set of ip numbers. Ideally I would like to have FTP over SSL, or something similar, but I'm not sure firefox/IE has that integrated and I don't think it was added to windows server until the 2008 version. Being able to access it like a web page makes it far easier for them to deal with too, instead of a 3rd program or cli.