MS releases IIS 'lockdown' utility. Apparently, not all sysadmins appreciate having to disable 10 different auxiliary services and set up secure file permissions manually on each and every new IIS installation. I'd say “better late than never,” but that would still give Microsoft too much credit. [diveintomark]