Secure the Web Tier with IIS

Securing Internet Information Services 5.0 (IIS) is essential for building secure Microsoft Application Center 2000 (Application Center) clusters. The IIS documentation in the Microsoft® Windows® 2000 Server Resource Kit contains extensive information, which you should read before making decisions about your Web site security. This section provides further procedural information on how to deal with various IIS security issues.

This section includes:

• Set ACLs on Virtual Directories 

• Set W3C Extended Logging  

• Check Executable Code Trustworthiness 

• Delete Untrusted Root CA Certificates 

• Remove Sample Applications 

• Disable Unused COM Components 

• Remove Unused Script Mappings 

• Validate ASP Input 

• Disable Parent Paths 

Did you find this information useful? Please send your suggestions and comments about the documentation to acdocs@microsoft.com.