The GotDotNet reference on changes to the ASP.NET worker process security identity and the effects these changes have had on performing tasks in ASP. NET that require elevated security permissions.
The Microsoft TechNet Security home page. The TechNet security site contains articles, patches, and tools that can help you properly configure and secure Windows 2000, IIS, and other Microsoft products to ensure that your applications are not compromised through incorrect server configuration or unpatched vulnerabilities.