My colleague Cenk in Turkey has just published a great set of IIS Best Practices. Sound advice.

HTH

Doug