RE: IIS6 on W2k3 DCs

From: Harlan Carvey (keydet89_at_yahoo.com)
Date: 01/14/05

  • Next message: Soluk, Kirk: "RE: IIS6 on W2k3 DCs"
    Date: Fri, 14 Jan 2005 11:07:01 -0800 (PST)
    To: "Benjamin D. Goldman" <bgoldman@kipany.com>, Joe Blatz <sd_wireless@yahoo.com>, focus-ms@securityfocus.com
    
    

    Joe,

    Here, I'll do this to help...

    DO NOT RUN IIS ON W2K3 DCs.

    Take that to your customer.

    If you need reasoning, then consider this...anytime
    you add new functionality (ie, a web server) to a
    system, you increase the attack surface and the
    management overhead.

    =====
    ------------------------------------------
    Harlan Carvey, CISSP
    "Windows Forensics and Incident Recovery"
    http://www.windows-ir.com
    http://windowsir.blogspot.com
    ------------------------------------------

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------


  • Next message: Soluk, Kirk: "RE: IIS6 on W2k3 DCs"