I know some of you are NOT using secure gateway but how did you secure
your IIS setup? Some used iChain etc but IIS itself? Is it ok to run IIS
Lockdown Tool? Something to consider before doing it?

Server requirements say:
"Microsoft Internet Information Services (IIS) 5.0 SP2 (or later) with
all Hot Fixes applied" How do you check IIS SP level? Our server is
running W2K SP4, and from registry I found that IIS MajorVerion is 5 and
Minor 0 does this tell something?
I did some searching but did not found anything about IIS 5 SP2 from MS

Hopefully we see OES version of GMS - soon. ;)