i thought when its able to harden the tcp/ip stack under windows, then it must be also possible under
windows, and what i have found is this microsoft article, it's worth reading it :
http://support.microsoft.com/kb/315669there is also a tiny hardening batch script for the whole windows environment ( not only
the tcp/ip stack ) :
http://www.ntsvcfg.de/ntsvcfg_eng.htmlthe advantage of this script : you can take a look at the code to see how it works/which registry keys it changes.