diff --git a/TODO b/TODO
index 7a7625684..135707389 100644
--- a/TODO
+++ b/TODO
@@ -21,3 +21,10 @@ add policies?
 
 verify_user: handle non-secure verification failing because of
 host->realm mapping
+
+* windows stuff
+
+-- remove NO_INETD
+-- drop all double negation #ifndef NO_
+-- got though windows specific ifdefs to minimized them
+-- switch to use heim-ipc for services, like the kadmin change notification socket