If you missed the presentation Dan Sellers, Deepak Manohar and I gave to 230+ Canadian security folks on 09/27/06 check out the following links:
http://msdn.microsoft.com/canada/securitylockdown/
Also Dan posted an entire presentation recap at his blog for Canadian Security Developers at:
http://blogs.msdn.com/s4cd/archive/2006/09/27/774602.aspx
--
Kevin Lam, CISSP
Senior Security Technologist
Microsoft Application Consulting & Engineering (ACE) Team