I would have a look at the NSA Security Configuration Guides located at http://www.nsa.gov/snac/ . You can then test them using the tools from Center for Internet Security. http://www.cisecurity.com/...