If you are in charge of maintaining the security baseline at your company, you know that there are two key problems you face.  First of all, there are a LOT of security settings to tweak within Windows.  The services you harden and lock down on a Domain Controller are very different from those that you harden on a Web Server.  We’ve provided some excellent and comprehensive recommendations in the following guides: Windows Server 2008 Security Guide Windows Server 2003 Security Guide