Microsoft has published rev. 1.6 of Securing Windows 2000 Server

The Securing Windows 2000 Server solution uses the principles of the Microsoft Solutions Framework (MSF), the Microsoft Operations Framework (MOF), and the Security Risk Management Discipline (SRMD) to help readers identify and assess threats and vulnerabilities in Microsoft Windows 2000 Server environments. The solution provides information to help organizations determine which risks have the greatest potential impact on their domain infrastructures, as well as guidance for the use of IPsec filters to lock down specific server roles. Dedicated chapters address the topics of patch management, auditing and intrusion detection, and incident response, and the appendices provide information about the purpose of all Windows 2000 services, registry access control changes, disabling NetBIOS, and configuring digital certificates on domain controllers.

Securing Windows 2000 Server 1.6