Home All Groups Group Topic Archive Search About
Author
17 Aug 2006 5:17 PM
Ann
I know that you should not need to run the Lockdown Tool with v6, but can
you?  Our IIS was installed before my time here. I'm not aware of settings
that may have been changed and would like to make sure all is secure and as
it should be. 

Thanks,

Ann

Author
17 Aug 2006 7:07 PM
Miha Pihler [MVP]
Hi Ann,

This article should help you out

UrlScan Security Tool
http://www.microsoft.com/technet/security/tools/urlscan.mspx

It will explain what was already built in into IIS 6 and what you get from
e.g. URLScan

Here are some other documents you might want to look at:

Threats and Countermeasures
http://www.microsoft.com/technet/security/topics/serversecurity/tcg/tcgch00.mspx

Windows Server 2003 Security Guide
http://www.microsoft.com/technet/security/prodtech/windowsserver2003/w2003hg/sgch00.mspx

--
Mike
Microsoft MVP - Windows Security

Show quoteHide quote
"Ann" <A**@discussions.microsoft.com> wrote in message
news:DF87C5E3-E706-406F-BFF4-F483ABE04BE6@microsoft.com...
>I know that you should not need to run the Lockdown Tool with v6, but can
> you?  Our IIS was installed before my time here. I'm not aware of settings
> that may have been changed and would like to make sure all is secure and
> as
> it should be.
>
> Thanks,
>
> Ann
Author
21 Aug 2006 8:23 PM
Ann
Thanks Miha.  I will review this info.

Ann

Show quoteHide quote
"Miha Pihler [MVP]" wrote:

> Hi Ann,
>
> This article should help you out
>
> UrlScan Security Tool
> http://www.microsoft.com/technet/security/tools/urlscan.mspx
>
> It will explain what was already built in into IIS 6 and what you get from
> e.g. URLScan
>
> Here are some other documents you might want to look at:
>
> Threats and Countermeasures
> http://www.microsoft.com/technet/security/topics/serversecurity/tcg/tcgch00.mspx
>
> Windows Server 2003 Security Guide
> http://www.microsoft.com/technet/security/prodtech/windowsserver2003/w2003hg/sgch00.mspx
>
> --
> Mike
> Microsoft MVP - Windows Security
>
> "Ann" <A**@discussions.microsoft.com> wrote in message
> news:DF87C5E3-E706-406F-BFF4-F483ABE04BE6@microsoft.com...
> >I know that you should not need to run the Lockdown Tool with v6, but can
> > you?  Our IIS was installed before my time here. I'm not aware of settings
> > that may have been changed and would like to make sure all is secure and
> > as
> > it should be.
> >
> > Thanks,
> >
> > Ann
>
>
>