The best site forr IIS is www.iisfaq.com, and it includes lots of suff on securing them.