Just thought I would pass this along, but I got an email from [url=www.iisanswers.com]www.iisanswers.com[/url] about this tricky little doc from the NSA regarding IIS5. Bear in mind that a previously released version was only a draft copy, and that this one is the release version.

http://www.iisanswers.com/iis_secure/SecureIIS5.zip