IIS Server Security - lockdown tool for IIS 6.0

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > August 2006 > lockdown tool for IIS 6.0





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author lockdown tool for IIS 6.0
steve

2006-08-21, 1:32 pm

Hi,

My question maybe be asked many times here and i will be gald if u could
answer again.
My server is windows 2003.
im installing Address Book Services in the LCS server. the requirement will
need IIS for ABS.
My questions is any tools to secure the IIS? i'm not using HTTPS. I heard
lockdown tool is not needed for IIS 6, is it true?

thanks

Miha Pihler [MVP]

2006-08-21, 1:32 pm

Hi,

This article should help you out

UrlScan Security Tool
http://www.microsoft.com/technet/se...ls/urlscan.mspx

It will explain what was already built in into IIS 6 and what you get from
e.g. URLScan

Here are some other documents you might want to look at:

Threats and Countermeasures
http://www.microsoft.com/technet/se...cg/tcgch00.mspx

Windows Server 2003 Security Guide
http://www.microsoft.com/technet/se...3hg/sgch00.mspx

--
Mike
Microsoft MVP - Windows Security

"steve" <steve@discussions.microsoft.com> wrote in message
news:5C8B01D7-B7CD-4D69-9604-A058DAB81A40@microsoft.com...
> Hi,
>
> My question maybe be asked many times here and i will be gald if u could
> answer again.
> My server is windows 2003.
> im installing Address Book Services in the LCS server. the requirement
> will
> need IIS for ABS.
> My questions is any tools to secure the IIS? i'm not using HTTPS. I heard
> lockdown tool is not needed for IIS 6, is it true?
>
> thanks
>



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com