Rodney Buike has written a thought provoking article about the challenges of locking down production systems whilst ensuring they still perform their intended business function. I'm sure that many of you who've worked in the field of Information Security have experienced such difficulties. "If I turn this feature off will the system still perform"?
Click here to read Rodney's article for yourself.
For those of you wishing to take the guesswork out of system lock down I suggest taking a look at Security Configuration Wizard (SCW) which is a feature of Windows Server 2003 Service Pack 1 - you can read more about it by clicking here - it's free and very effective.