Situation: inherited SS2K undocumented COTS web app. The organization is concerned about security (the lack of in SS2K) and would like to upgrade. While resources probably could be found to do a "full-up" transition to SS2K8, the time available is limited.
Question: by transitioning to SS2K8, but running in SS2K compatibility mode, do we gain anything? Especially with data level security?
I suspect the answer is "no" but I just wanted to cast a wide net out to the community and see if anyone has gone through this before?