If you have essential software or hardware that only works with XP, you could buy a cheap wired-only router for each of your XP systems to keep them isolated from the rest of your network (which a friend's skeezy laptop might be trying to exploit without her knowledge when she brings it over to collaborate on a project).