A discussion about the following security hotfix was included in SP2 and has made the rounds on our SharePoint Discussions Yahoo Group but I haven't seen anyone blog about it yet. So...
The Opportunity
Users who are members of the local Administrators group have access to all the content in your Windows SharePoint Services Web sites.
A Partial Solution
Run the following command on a WSS Web Server:
"C:\Program Files\Common Files\Microsoft Shared\Web Service Extensions\60\bin\stsadm.exe" –o set property –propertyname denymachineadminaccess –propertyvalue 1
“After you install and enable this hotfix, you must explicitly permit access to the members of the local Administrators group for the content in your Windows SharePoint Services Web sites. [However], you should not consider this hotfix to be a comprehensive security solution. After you install this hotfix, local computer administrators still have access to the SharePoint Central Administration Web pages.”
<Todd />