FYI…

- http://www.microsoft.com/technet/windowsvi…d_security.mspx
Updated: December 18, 2006 ~ "…(SSLF) baseline in this guide addresses the demand to help create highly secure environments for computers running Windows Vista™. Concern for security is so great in these environments that a significant loss of functionality and manageability is acceptable. The Enterprise Client (EC) security baseline helps provide enhanced security that allows sufficient functionality of the operating system and applications for the majority of organizations…"

- http://preview.tinyurl.com/2d9o5f
March 20, 2007 ~ "SANS Newsletter - The White House just released (at 9 AM Tuesday, March 20) a directive to all Federal CIOs, requiring that all new IT system acquisitions, beginning June 30, 2007, use a common secure configuration and, even more importantly, requiring information technology providers (integrators and software vendors) to certify that the products they deliver operate effectively using these secure configurations. This initiative builds on the pioneering "comply or don't connect" program of the US Air Force; it applies to both XP and Vista, and comes just in time to impact application developers building applications for Windows Vista, but impacts XP applications as well. No VISTA application will be able to be sold to federal agencies if the application does not run on the secure version (SSLF) of Vista. XP application vendors will also be required to certify that their applications run on the secure configuration of Windows XP…
(…SANS hasn't issued a FLASH announcement in more than two years…)"

.