Good article on SMS/SCCM security

https://myitforum.com/cs2/blogs/eholtz/archive/2005/03/08/3859.aspx