For E2k, there's an IS hotfix - check the MS website for details.
For IIS, don't forget to implement IISLockdown.
Quote:> Are there any extra patches other than service pack 3 for
> Windows 2000 and the latest service pack for Exchange 2000
> that need to be applied? Any extra IIS patches?
Securing Exchange 2000
Join Microsoft experts on February 20, 2003 from the UK & the US to
discuss tips, techniques and best practices to help you lockdown an
Exchange 2000 server to protect it from external and internal
manipulation and/or attack.
February 20, 2003
6:00 - 7:00pm London (10:00-11:00am Pacific)