IIS Security

I'm trying to use IIS's Integrated Windows Authentication to take advantage of various user management and security features of Windows, namely password expiry and complexity checking. But currently if your password expires, or the user flag "must change ...

Hi, I'm wondering which file extensions are treated as "exposed" and which are "hidden" by the IIS? I was told that the .bak file is exposed so external users can actually browse and see content of files with .bak extension but I ...

Hi gang!  I need some help here...ok, I need a LOT of help here!  I've just been informed that we will be building a new Win2003 based web server that will host our public web site.  To my surprise I have been directed to put ...

Please help, I've got an IIS machine that is failing PCI compliance due to the 'False Logging Weakness'.  the resolution states to use URLScan to translate hex codes into characters, but I have no idea how to do this... ...