For anyone that is looking to lock down their systems, please take a look at the new SCM…just released to the download center! The Microsoft Security Compliance Manager has baselines and specific threats and Countermeasures for every setting for your servers (and Roles) and applications (at least the ones included in the tool, which is a lot). Once you build your baseline and any changes (you can compare the two) meaning that the Microsoft baseline recommendation and any specific changes you have...