I have a Win2K domain and need to create an intranet web server. I'm
concerned about the security, will do a clean install of Windows 2000
Server/IIS 5, and am referencing the following document,
http://windowsitpro.com/articles/print.cfm?articleid=22274 but I'm still
concerned if the steps mentioned are sufficient for an intranet server?
--
TIA
Mattie
If you are concerned about security then do not use Windows 2000
for a new install as it is nearing the end of its supported lifecycle
and will like stop having patches for it before you are done using
the new intranet website. Also, IIS 7 if far superior to IIS 5, as is
also the case with IIS 6.
Roger (Security MVP)
"mattie"
news:918DAE84-866F-49E7-BC28-74B594570CB8@microsoft.com...
>I have a Win2K domain and need to create an intranet web server. I'm
> concerned about the security, will do a clean install of Windows 2000
> Server/IIS 5, and am referencing the following document,
> http://windowsitpro.com/articles/print.cfm?articleid=22274 but I'm still
> concerned if the steps mentioned are sufficient for an intranet server?
> --
> TIA
> Mattie
I understand what you're saying, but Win2k and IIS 5 are what I have to work
with for now. This is being used for development and we'll have to support
Win2k through at least Win2003 for now. What points of security do I need to
be concerned with now for Win2k/IIS 5 as an intranet server?
--
Thanks,
Mattie
"Roger Abell [MVP]" wrote:
> If you are concerned about security then do not use Windows 2000
> for a new install as it is nearing the end of its supported lifecycle
> and will like stop having patches for it before you are done using
> the new intranet website. Also, IIS 7 if far superior to IIS 5, as is
> also the case with IIS 6.
>
> Roger (Security MVP)
>
> "mattie"
> news:918DAE84-866F-49E7-BC28-74B594570CB8@microsoft.com...
> >I have a Win2K domain and need to create an intranet web server. I'm
> > concerned about the security, will do a clean install of Windows 2000
> > Server/IIS 5, and am referencing the following document,
> > http://windowsitpro.com/articles/print.cfm?articleid=22274 but I'm still
> > concerned if the steps mentioned are sufficient for an intranet server?
> > --
> > TIA
> > Mattie
>
>
>
I am not sure whether the IIS 5 and W2k specific material is
available any longer in the guidance series off the websites
www.microsoft.com/security www.microsoft.com/technet/security
but much of the material has not changed greatly to the newer
release versions (except for things not available in the older).
The degree to which one attempts to harden a service point
depends on the threat model you assume, such as how trusted
or not the user base is that can poke at the intranet server.
Roger
"mattie"
news:F982A867-A06E-4F4A-A683-E7D95D222902@microsoft.com...
>I understand what you're saying, but Win2k and IIS 5 are what I have to
>work
> with for now. This is being used for development and we'll have to
> support
> Win2k through at least Win2003 for now. What points of security do I need
> to
> be concerned with now for Win2k/IIS 5 as an intranet server?
>
> --
> Thanks,
> Mattie
>
>
> "Roger Abell [MVP]" wrote:
>
>> If you are concerned about security then do not use Windows 2000
>> for a new install as it is nearing the end of its supported lifecycle
>> and will like stop having patches for it before you are done using
>> the new intranet website. Also, IIS 7 if far superior to IIS 5, as is
>> also the case with IIS 6.
>>
>> Roger (Security MVP)
>>
>> "mattie"
>> news:918DAE84-866F-49E7-BC28-74B594570CB8@microsoft.com...
>> >I have a Win2K domain and need to create an intranet web server. I'm
>> > concerned about the security, will do a clean install of Windows 2000
>> > Server/IIS 5, and am referencing the following document,
>> > http://windowsitpro.com/articles/print.cfm?articleid=22274 but I'm
>> > still
>> > concerned if the steps mentioned are sufficient for an intranet server?
>> > --
>> > TIA
>> > Mattie
>>
>>
>>