lockdown tool for IIS 6.0

21 Aug 2006 11:28 AM

steve

Hi,

My question maybe be asked many times here and i will be gald if u could
answer again.
My server is windows 2003.
im installing Address Book Services in the LCS server. the requirement will
need IIS for ABS.
My questions is any tools to secure the IIS? i'm not using HTTPS. I heard
lockdown tool is not needed for IIS 6, is it true?

thanks

21 Aug 2006 12:49 PM

Miha Pihler [MVP]

Hi,

This article should help you out

UrlScan Security Tool
http://www.microsoft.com/technet/security/tools/urlscan.mspx

It will explain what was already built in into IIS 6 and what you get from
e.g. URLScan

Here are some other documents you might want to look at:

Threats and Countermeasures
http://www.microsoft.com/technet/security/topics/serversecurity/tcg/tcgch00.mspx

Windows Server 2003 Security Guide
http://www.microsoft.com/technet/security/prodtech/windowsserver2003/w2003hg/sgch00.mspx

--
Mike
Microsoft MVP - Windows Security

Show quoteHide quote

"steve" <st***@discussions.microsoft.com> wrote in message
news:5C8B01D7-B7CD-4D69-9604-A058DAB81A40@microsoft.com...
> Hi,
>
> My question maybe be asked many times here and i will be gald if u could
> answer again.
> My server is windows 2003.
> im installing Address Book Services in the LCS server. the requirement
> will
> need IIS for ABS.
> My questions is any tools to secure the IIS? i'm not using HTTPS. I heard
> lockdown tool is not needed for IIS 6, is it true?
>
> thanks
>