Securing Internet Information Server (IIS) 6 for DMZ Placement

Install IIS libraries and web content on partition “D”, leveraging the Microsoft “unattended install” feature.

Create the following text file (is_iis.txt)

[Components]
iis_common = on
iis_inetmgr = on
iis_www = on
iis_ftp = off
iis_htmla = off
aspnet = on
iis_asp = on

[InternetServer]
Path= "d:\<IIS Installaion Directory>"
PathWWWRoot = "d:\<IIS Web Content"

This text file will install IIS with ASP and ASP.NET enabled. This test file should be adjusted to suit the environment in which it is installed. For example, if ASP.NET is not used on the server the “aspnet= on” should be modified to “aspnet-off”. For a complete listing of the options that can be installed with IIS 6 please refer to this Microsoft Support Article.

Save the file to a directory for later use. For this example, we will use C:\IISinstall\is_iis.txt

Execute the following command:

sysocmgr /i:c:\windows\inf\sysoc.inf /u:c:\IISinstall\is_iis.txt

Once IIS has been installed, new websites, directories, virtual directories can be created using the IIS administrator console. It is recommended that all web content be stored in a directory structure not contained within the installation directory of IIS. E.G – D:\webcontent