Usually on a windows box, PHP will be using SMTP to relay mails via the local host.
The MS IIS SMTP server (which ships with Windows) does not allow this by default, and must have its configuration changed to allow relaying from localhost. This is not a security liability.
Mark