Securing Internet Information Server (IIS) 6 for DMZ Placement

When Microsoft released Windows Server 2003, they also released the Microsoft Security Configuration Guide. This guide includes templates for configuring the server securely depending on the role of the server within the environment. The templates that will be applied to the web servers are: High Security - Domain.inf, High Security – Bastion Host.inf, and High Security – IIS Server.inf. Copy these template files to a folder on the local system for use. (e.g.-c:\securitytemplates\)

All local configuration settings within the Windows Server 2003 server are database-driven.

Warning – The application of these template files places the IIS server in a secure state. The settings found in these template files should be reviewed and tested prior to installing them on your web server.

To customize MMC:

• Open MMC and in Console, Add / Remove Snap-in click Add.
• On Add Standalone Snap-in select Security Templates, click Add; select Security Configuration and Analysis click Add, Close; OK.