If you run an SSL server it is well worth running it through https://www.ssllabs.com/ssltest/index.html to spot any config errors. It was this that spotted I had SSLv3 enabled. I would have been completely clueless otherwise.
The only configuration tool I know of is https://www.nartac.com/Products/IISCrypto/.