I've just read the post by Fritz Onion about the news on IIS7 (be quit, it will be available only in 2006 or later 
).
It will be focused about a total integration with the .NET Framework... good news that there will no longer be any difference between specifying IIS security settings and ASP.NET security settings and that all configuration settings in IIS can now be manipulated through the web.config file.
In particular, this last feature gives me thinking... will be totally secure this, or a possible danger?