I am in the process of developing Configuration Standards to address PCI DSS requirements and I'd liketo use recommendations defined in the MS "Windows Server 2003 Security Guide" and the related template files. But that guide states that it is relevant to SP1, not SP2. Does anyone know if there are changes in SP2 that would render the Guide no longerapplicable to servers running that Service Pack? Or could I use the Guide on SP2 based servers without reservation?Thanks.

You can use theWindows Server 2003 SP2 Security Configuration Guide 3.0 for your situationYou can download ithere in PDF and XPS format.

That was quick. Thanks! And, my, but that document is huge!

I know this is the Server forum, but do you know if there is a similar document for XP Pro SP3?? I've found one for SP2 but we've pushed out SP3.Again, thanks.

Hi, Windows XP Service Pack 3 (SP3) TechNet site: http://technet.microsoft.com/en-us/windows/bb794714.aspx Hope it helps. Tim Quan - MSFT

Is there an editable Excel Spreadsheet or Word Table version of the Configuration Checklists for W2K3 and XP that is available? I find the document/s I've been referred to to be very extremely thorough. I'd like to build a Configuration Standard and a Configuration Checklist from them but would loath to have to retype all of that info.Thanks