Microsoft IIS Lockdown Tool will provide you the means to instantly configure an IIS 4.0 or 5.0 Web server for secure operation.

IIS Lockdown Wizard works by turning off unnecessary features, thus reducing attack surface available to attackers. To provide multiple layers of protection against attackers, URLscan, with customized templates for each supported server role, is integrated into the IIS Lockdown Wizard.

To keep the server completely secure, however, all hotfixes are required before and after applying IIS Lockdown Wizard to stay protected against known security vulnerabilities.

It provides two modes: an express mode that is appropriate for most basic web servers, and an advanced mode that allows the administrator pick and choose the technologies the server will support.

The tool provides an undo feature that allows the effects of the most recent lockdown to be reversed.

Requirements:

· Windows NT 4.0 running IIS 4.0, Windows 2000 running IIS 5.0, or Windows XP running IIS 5.1

What's New in This Release: [ read full changelog ]

· Server Roles: Version 2.1 is driven by supplied templates for the major IIS-dependent Microsoft products, including Microsoft Exchange 5.5 and 2000, Commerce Server, BizTalk, Small Business Server 4.5 and 2000, SharePoint Portal Server, FrontPage Server Extensions and SharePoint Team Server
· URLscan integration, with customized templates for each supported server role
· Ability to remove or disable IIS services such as HTTP, FTP, SMTP and NNTP
· The updated wizard is able to read from an answer file, giving support for scripted or unattended installation
· Re-designed UI and bug fixes based on user feedback