If Win2k and XP client are connecting to the same group, seems like that the problem is on the XP client but not on the concentrator.
Please check and make sure that the XP box has the built-in firewall disabled. If it was enabled, please disable it and reload the XP box.
I believe the problem has been fixed in 4.x releases.