Ok so have put it on nt. Seems fine and just finished the 2k server. Got many more to go but here is what I found. After running it I put on the CIS tools that another member posted link to and it found dozens of hfx and patches still outstanding. This then required repeated visits and downloads, reboots, more download reboots.

You got the picture. One w2k host reqd more than ten patches and reboots. What a waste of my time. I have to do it sure, but having to do it, it is kind of like having lunch on the beach. You like the sun and fun but the sand in the food grits your teeth.

CIS reported things mucho better with just some policy work after all that.