Does it really matter? If anyone you dont trust can get access to the server they could boot from a pe cd or a knoppix cd or erd commander or a dos floppy with ntfs or ...... The basic point is that is anyone can get physical access to the server, they own it. In worst case the can always install an extra xp/server2003 on it to read the data