In Windows XP the default setting of sharing and security model is set to "Guest". This forces all remote authentication requests to be executed under the "Guest" account (which is disabled by default). You have to change the remote authentication to "Classic – local users authenticate as themselves".
Start->Settings->Control Panel->Administrative Tools->Local Security Settings->Local Policies->Security Options->Network Access