RE: Lockdown tool for .Net server

From: Michael Laing [MSFT] (mdonlinelaing@microsoft.com)
Date: 02/12/03


From: mdonlinelaing@microsoft.com (Michael Laing [MSFT])
Date: Wed, 12 Feb 2003 01:01:19 GMT


Hi Paul,

The functionality of the IIS Lockdown Tool for IIS 4 and 5 has been
integrated right into IIS 6. You can find out more about IIS 6 here:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechn
ol/windowsnetserver/proddocs/server/iiswelcome.asp

Specifically, "IIS 6.0 provides significantly improved security. To reduce
the attack surface of systems, IIS is not installed by default on the
operating systems in the Windows Server 2003 family. Administrators must
explicitly select and install IIS. IIS installs by default in a locked down
state, capable of serving only static content"

Thanks,

Michael Laing
Microsoft Developer Support
Internet Information Server

***********************
>>Please do not send email directly to this alias. This is an online
account name for newsgroup participation only.<<

This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use.
© 2002 Microsoft Corporation. All rights reserved.
***********************
--------------------
| From: "Paul From Bakersfield" <paul@whygle.com>
| Subject: Lockdown tool for .Net server
| Date: Tue, 11 Feb 2003 09:59:20 -0800
| Lines: 8
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2720.3000
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
| Message-ID: <evkSNdf0CHA.1352@TK2MSFTNGP11>
| Newsgroups: microsoft.public.inetserver.iis.security
| NNTP-Posting-Host: adsl-66-122-1-250.dsl.bkfd14.pacbell.net 66.122.1.250
| Path: cpmsftngxa08!cpmsftngxa06!TK2MSFTNGP08!TK2MSFTNGP11
| Xref: cpmsftngxa08 microsoft.public.inetserver.iis.security:15265
| X-Tomcat-NG: microsoft.public.inetserver.iis.security
|
| Is there an IIS lockdown tool for IIS 6.0. I am running the RC2 of .Net
| Server and everytime I go to run the lckdown tool from Microsoft's site it
| tells me that IIS is not running or I neeed to have version 4.0 or 5.0.
My
| IIS is running (I have even rebooted and stopped and restarted IIS several
| times). Is there a special download to install IIS lockdown on the .Net
| server?
|
|
|



Relevant Pages

  • Re: Machine does not respond.
    ... IIS Lockdown on a Windows 2003 Server. ... > We have several W2K3 servers running IIS for development purposes. ...
    (microsoft.public.windows.server.security)
  • iis lockdown
    ... I had a software package load on a server and it had the ... lockdown tool in it. ... It completely reconfigured my iis ... server so that my web site with asp is not working and my ...
    (microsoft.public.security)
  • IIS Lockdown tool.
    ... I had a software package load on a server and it had the ... lockdown tool in it. ... It completely reconfigured my iis ... server so that my web site with asp is not working and my ...
    (microsoft.public.inetserver.iis.security)
  • iis lockdown
    ... I had a software package load on a server and it had the ... lockdown tool in it. ... It completely reconfigured my iis ... server so that my web site with asp is not working and my ...
    (microsoft.public.inetserver.iis.security)
  • RE: IIS Lockdown tool.
    ... Restore the backup of your IIS metabase. ... server name in the IIS management console and click Properties. ... That will undo most of the changes made by the lockdown tool. ...
    (microsoft.public.inetserver.iis.security)