Locking down IIS on Windows 2003 Domain Controller

Hi Gurus

Can anyone advise on the steps needed to safely lock down IIS on a Windows
2003 donain controller.

I know IIS lockdown is not needed on Windows 2003 IIS and I know I need to
still run URLScan 2.5 but I was wondering if there are any other best
practices that I should carry out.

I need to install IIS on a Windows 2003 domain controller to support SMS
2003 distribution points in remote satellite offices where many only have a
single domain controller. (Microsoft provide a special urlscan.ini file
specifically for SMS which I will be running)


Thanks a million in advance for any advice at all.

Dan

Re: Locking down IIS on Windows 2003 Domain Controller

"Desparate Dan" wrote in message
news:232EB025-A18D-4D3A-8C91-E64495504017@microsoft.com...
> Hi Gurus
>
> Can anyone advise on the steps needed to safely lock down IIS on a Windows
> 2003 donain controller.
>
> I know IIS lockdown is not needed on Windows 2003 IIS and I know I need to
> still run URLScan 2.5 but I was wondering if there are any other best
> practices that I should carry out.
>
> I need to install IIS on a Windows 2003 domain controller to support SMS
> 2003 distribution points in remote satellite offices where many only have
> a
> single domain controller. (Microsoft provide a special urlscan.ini file
> specifically for SMS which I will be running)
>
>
> Thanks a million in advance for any advice at all.

Start here: http://www.microsoft.com/technet/security/prodtech/IIS.mspx

--
Tom Kaminski IIS MVP
http://www.microsoft.com/windowsserver2003/community/centers /iis/
http://mvp.support.microsoft.com/
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS

Re: Locking down IIS on Windows 2003 Domain Controller

Thanks Tom


"Tom Kaminski [MVP]" wrote:

> "Desparate Dan" wrote in message
> news:232EB025-A18D-4D3A-8C91-E64495504017@microsoft.com...
> > Hi Gurus
> >
> > Can anyone advise on the steps needed to safely lock down IIS on a Windows
> > 2003 donain controller.
> >
> > I know IIS lockdown is not needed on Windows 2003 IIS and I know I need to
> > still run URLScan 2.5 but I was wondering if there are any other best
> > practices that I should carry out.
> >
> > I need to install IIS on a Windows 2003 domain controller to support SMS
> > 2003 distribution points in remote satellite offices where many only have
> > a
> > single domain controller. (Microsoft provide a special urlscan.ini file
> > specifically for SMS which I will be running)
> >
> >
> > Thanks a million in advance for any advice at all.
>
> Start here: http://www.microsoft.com/technet/security/prodtech/IIS.mspx
>
> --
> Tom Kaminski IIS MVP
> http://www.microsoft.com/windowsserver2003/community/centers /iis/
> http://mvp.support.microsoft.com/
> http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
>
>
>