For administrators, this guide provides the following solutions:
How to implement patch management
Use the Microsoft Baseline Security Analyzer (MBSA) to detect the patches and updates that may be missing from your current installation. Run this on a regular basis, and keep your servers current with the latest patches and updates. Back up servers prior to applying patches, and test patches on test servers prior to installing them on a production server. Also, use the security notification services provided by Microsoft, and subscribe to receive security bulletins via e-mail.
For more information, see "How To: Implement Patch Management" in the "How To" section of this guide.
How to make the settings in Machine.config and Web.config ...