Got IIS installed and locked down. Not sure it's completely secure as it is though, need to set some NT permissions. Some of the articles I've read infer you should move cmd.exe and various other standard "admin tools" from their default installation.