windows server 2000 protection?

Hi, guys,
we have windows server 2000 as a domain contoller. There's no firewall on it. and we worried about the attack from the client pc inside the domain, is there any better solutions, such as softeware to give server protection?
or any configuration sugesstions?
Thak you very much!