Re: Exchange 2000 and Software Update Services SUS

From: Ken Schaefer (kenREMOVE_at_THISadOpenStatic.com)
Date: 04/22/04 

Date: Thu, 22 Apr 2004 12:21:56 +1000

This sill be a bit messy. The IISLockDown tool will install URLScan, and
you'll need to configure URLScan to allow continued access to OWA.

Personally, I would not recommend running SUS on a Domain Controller. If
something goes wrong with SUS, then your DC may be adversely affected.
Additionally, if you have many clients downloading patches from SUS, this
may restrict the bandwidth available to other apps/users.

The following KB articles may be helpful:
XCCC: IIS Lockdown and URLscan Configurations in an Exchange Environment
http://support.microsoft.com/?id=309508

XADM: Known Issues and Fine Tuning When You Use the IIS Lockdown Wizard in
an Exchange 2000 Environment
http://support.microsoft.com/?kbid=309677

XCCC: The URLScan Utility Does Not Allow You to Open Messages in OWA
http://support.microsoft.com/?id=320089

Cheers
Ken

"Tanya P" <anonymous@discussions.microsoft.com> wrote in message
news:22ce01c427ae$a3f32430$a101280a@phx.gbl...
: Hello all,
:
: I have an Exchange 2000 server and IIS 5 running on a
: Windows 2000 standard server. Windows server is configured
: as a Domain controller also with service pack 4.
:
: I would like to install windows Software Update Services
: (SUS) on my domain controller.
:
: Since my remote users access the webmail using IIS 5, I
: was wondering if IIS lockdown tool that runs as a part of
: SUS would affect the webmail users in anyway?
:
: And if anyone has tried using SUS, IIS 5 and MS Exchange
: 2000 running on a Windows 2000 standard domain controller
: and how did it go for them?
:
: Thank you in advance.
: T.P

Relevant Pages

  • Re: How to secure a web server?
    ... The IIS Lockdown tool is not needed on Windows 2003 with IIS6.0 and I am not ... URLscan can still be used on IIS6.0 though ...
    (microsoft.public.windows.server.security)
  • Re: How to secure a web server?
    ... The IIS Lockdown tool is not needed on Windows 2003 with IIS6.0 and I am not ... URLscan can still be used on IIS6.0 though ...
    (microsoft.public.inetserver.iis)
  • Re: IIS Lockdown
    ... killed FP counters and search forms. ... allowing *.exe extensions in URLscan. ... >files in the install folder, you could edit those and see ... >> I want to run IIS Lockdown before exposing IIS5 server ...
    (microsoft.public.inetserver.iis.security)
  • Re: Trend C/S/M SMB on SBS2003
    ... IIS6 is locked down by default, so you do not need to run IIS Lockdown ... URLScan can run on IIS6 if you wish. ...
    (microsoft.public.windows.server.sbs)
  • Re: IIS Lock down tool configuration
    ... If it's URLScan causing the problem, read URLScan.log to see what is being ... IIS Lockdown does have an uninstaller, ... I have an exe script for some ...
    (microsoft.public.inetserver.iis.security)