RE: Locking down IIS

From: Brian McKinney (rizzdogg@noc.theworks.com)
Date: 12/21/01 

From: Brian McKinney <rizzdogg@noc.theworks.com>
To: 'James Kelty' <jamesk@ashlandagency.com>
Date: Fri, 21 Dec 2001 09:17:48 -0800

www.nsa.gov has some great documentation on securing windows 2000 and iis5.

Hope that helps,

Brian

-----Original Message-----
From: James Kelty [mailto:jamesk@ashlandagency.com]
Sent: Thursday, December 20, 2001 9:11 AM
To: security-basics@securityfocus.com
Subject: Locking down IIS

Hello!

I was wondering if someone could point me in the right direction to books,
and or web sites that will lay out the best way to lock down, bastionize, a
win2k/IIS 5.0 server. Thanks!

-James

Relevant Pages

  • Re: ASP pages will not run on IIS 6.0
    ... IIS6 will run in IIS5 Compatbility ... During the upgarde IIS had deemed to set this to Medium, ... you noticed ASP ... checking the IIS log files ...
    (microsoft.public.inetserver.iis.security)
  • Re: Where can I get IIS 6 and can I install it on XP?
    ... between IIS5 and IIS6 ... #Moving ASP.NET Apps from IIS 5.x to 6.0 ... it's running other sites written in .net 1.1 I had to set up a separate ...
    (microsoft.public.dotnet.languages.vb)
  • Re: IIS 5 Win2000/IIS 4 WinNT
    ... >I am running an application on WinNT running IIS 4 and it works fine. ... >However when I run the same application under Win2000 using IIS5, ... If it's a permissions problem, you should get an error, ...
    (microsoft.public.inetserver.iis.security)
  • RE: set IIS (v6) security defaults back to IIS v5 compatibility levels
    ... To configure IIS on Windows 2003 to run in IIS5 compatibility mode, ... the IIS Manager, right click on the Websites folder-> Properties-> Service ... Microsoft Developer Support ... Internet Information Server ...
    (microsoft.public.inetserver.iis.security)
  • Re: How To Create "Out Of Process" Components
    ... > Hello Brian, ... lifetime of the remoted object here. ... This is definitely doable with .NET Remoting. ... If you use IIS then you will need IIS installed on every machine your ...
    (microsoft.public.dotnet.general)