Long time ago, I came across ASP.NET BPA which looks at machine.config and web.config for potential security and general configuration issues. It's a must use tool for ASP.NET developers. It classifies the settings for Development, Deployment and Production
Read More...