IS 2008 now logs IIS property values that are being set in application pools. This includes secure properties such as passwords. These should be masked with asterisks. For reference, the adsutil.vbs script included with IIS does this (see the IsSecur...