Microsoft IIS Lockdown Tool

Microsoft IIS Lockdown Tool is a handy tool that enables you to configure a web server running on IIS 4.0 or 5.0, offering you the possibility to disable unnecessary features so as to enhance security.

Microsoft IIS Lockdown Tool is compatible with systems running on Windows NT, 2000 and XP, allowing you to create a custom configuration for your web server. It is recommended that you install all the critical updates and hotfixes before using this application, in order to make sure that your server is completely safeguarded against the latest security vulnerabilities.

The package features URLscan integration, providing customized templates for every server role, in order to avoid the manual configuration of URLscan filters. It is compatible with all the major IIS-dependent products delivered by Microsoft, including Exchange Server 5.5, Commerce Server, Exchange 2000 Server, Small Business Server 4.5 and 2000, SharePoint Portal Server, FrontPage Server Extensions, SharePoint Team Services or BizTalk Server.

The application works like a wizard, guiding you throughout the entire process of configuring your web server. It helps you remove or deactivate IIS services, such as HTTP, SMTP, NNTP or FTP.

The security-related settings in higher versions of IIS (6.0 and 7.0) superseed the enhancements provided by the Microsoft IIS Lockdown Tool. As such, this utility is not needed for servers based on IIS version 6.0 or 7.0, but it should be used in case you are upgrading from an older IIS version, so as to enhance the protection of your server against attackers.