"When we started shipping IIS (Internet Information Server) 6 in beta with things locked down, customers would say, "You broke my applications." We said, "That's because everything's closed. You really need to go in and decide what should be open." So they said, "Oh, here's what we want. Why don't you put in a button that turns everything on?" Well, that just defeats the whole purpose."

Interview with MS info-security czar.