Hi,

For IIS 5 hardening, the following are some of the registry keys to be set:

 HKLM\System\CurrentControlSet\Services\H
TTP\Parameters
AllowRestrictedChars == 0
MaxFieldLength == 16384 bytes
UrlSegmentMaxLength == 260
UrlSegmentMaxCount == 255
---------------------------------------------------------------------
Are these registry settings required for IIS 6.0 ?

Regards,
Sunil

[ Post a follow-up to this message ]

Nope, you don't need to set those registry values at all.

I do not know where you got the information that those registry keys are for
IIS5 Hardening.  That's incorrect.  Those registry keys only apply for IIS6
and are the default values.  They do not exist nor apply for IIS5.

Since they are the default values, I'd suggest that you do not bother with
setting them at all unless you know what you are doing.  The default values
are secure and already tradeoff functionality (i.e. people end up loosening
those values).

--
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Sunil Vakharia" <Sunil Vakharia@discussions.microsoft.com> wrote in message
news:9CF24CF3-31A7-4904-B3AB-F7B274F291E9@microsoft.com...
Hi,

For IIS 5 hardening, the following are some of the registry keys to be set:

 HKLM\System\CurrentControlSet\Services\H
TTP\Parameters
AllowRestrictedChars == 0
MaxFieldLength == 16384 bytes
UrlSegmentMaxLength == 260
UrlSegmentMaxCount == 255
---------------------------------------------------------------------
Are these registry settings required for IIS 6.0 ?

Regards,
Sunil

[ Post a follow-up to this message ]