Securing Internet Information Server (IIS) 6 for DMZ Placement

To create the database:

• Click Security Configuration and Analysis in MMC console.
• Right-click Security Configuration and Analysis in the left pane and click Open Database.
• Navigate to the c:\securitytemplates folder, type a name (WebServer1) as the name for your database (will have *.sdb extension) and click Open.

  To create merged template and apply it locally:

  • Select High Security - Domain.inf, High Security – Bastion Host.inf, High Security – IIS Server.inf (IN THIS ORDER, last is most significant) as the merged security template to import into the database. The first template is imported as part of the database creation. To import the remaining two templates: Right Click on Security Configuration and Analysis and select Import, then choose the appropriate template file. C:\securitytemplates\high security – bastion host.inf and c:\securitytemplates\high security – iis server.inf.
  • You can explore the database settings before applying them by right-clicking Security Configuration and Analysis, and than selecting Analyze Computer Now from the context menu.