Using Microsoft's IISlockdown Tool to Protect Your IIS Web Server

Author: Jeff Wichman Published May 14, 2011 from SANS

The topic of this paper is to give informational instructions on the IISlockdown tool. The paper will include information from the Great Lakes Sans conference, common exploits for IIS servers, best practices for installing the IISlockdown tool and information on tools used to test the server following the installation. The test system is a default installation of Windows 2000 Server current with all service packs and hotfixes.

Tags:

Read the complete paper at SANS