First, having Windows itself creates a security hole.. :)

However, there is Apache for windows where you can incorporate the .htaccess feature...

If you're using ISS or IIS (which ever comes with windows), you can install apache to handle your familiarity with it.

...& that's my 2 cents...