Re: IIS security lockdown tool vs templete

From: Karl Levinson [x y] mvp (levinson_k@excite.com)
Date: 11/15/02 

From: "Karl Levinson [x y] mvp" <levinson_k@excite.com>
Date: Fri, 15 Nov 2002 16:14:57 -0500

"Keith" <kleimank@wharton.upenn.edu> wrote in message
news:eRIhVdOjCHA.2428@tkmsftngp10...
> What is the difference between the IIS Lockdown tool and the IIS Security
> Template? Do they do the same things?

No. For one thing, IISlockdown includes URLscan, which is arguably the
single most important part of it.

Other than that, I'm not sure, except that an executable file like
IISLockdown theoretically has the ability to do things a security template
can't, like manipulating files.

I'm not sure that either tool deletes, say, sample script files from your
computer, so you may need to do some additional checklist stuff manually.
I'm sure it doesn't secure other parts of Windows 2000 such as disabling
unneeded services, Netbios over TCPIP, installing patches, etc. etc. so
you'd also want to harden windows 2000 separately as well.

Relevant Pages

  • Re: IIS security lockdown tool vs templete
    ... > What is the difference between the IIS Lockdown tool and the IIS Security ... IISLockdown theoretically has the ability to do things a security template ...
    (microsoft.public.security)
  • IIS security lockdown tool vs templete
    ... What is the difference between the IIS Lockdown tool and the IIS Security ... Template? ... Keith ...
    (microsoft.public.security)
  • IIS security lockdown tool vs templete
    ... What is the difference between the IIS Lockdown tool and the IIS Security ... Template? ... Keith ...
    (microsoft.public.win2000.security)
  • Re: Security in the real world - IIS lockdown tool
    ... You can have as little or as much security as you wish. ... the URLscan software that comes with IISlockdown is a lifesaver. ... Most of the things IISlockdown does you can do manually one by one using the ... > uninstalling IIS lockdown tool and from there the software vendor could ...
    (microsoft.public.win2000.security)
  • Re: Security in the real world - IIS lockdown tool
    ... You can have as little or as much security as you wish. ... the URLscan software that comes with IISlockdown is a lifesaver. ... Most of the things IISlockdown does you can do manually one by one using the ... > uninstalling IIS lockdown tool and from there the software vendor could ...
    (microsoft.public.win2000.security)