Hardening

Changing system settings at this level is generally a Bad Idea, as it'll potentially break stuff.

 

 

 

That's the point of a best practices guide, isn't it? I understand your position, it just won't hold water in all environments. All systems in some locations require hardening or they are not certified to be placed on the network. Period.

 

 

Version-specific hardening scripts would be handy...any takers? Clearly these will need to be run after hotfixes/upgrades as the changes they enforce are blow away.

 

 

My $.02, anyway.