windows machines have ftp as part of IIS features. you can configure it to use active directory for authentication purpose. I believe server 2008 will give you more security features for hosting ftp service.
you can use winscp..its easy to use.
I would utilize Filezilla FTP Server which is quick and easy to configure and setup. Plus it’s FREE. They also have a ftp client (free) as well.