Securing Internet Information Server (IIS) 6 for DMZ Placement

Browse though each section of the security configurations and ensure that all settings meet the organizational security policies. Most organizations will want to examine closely the sections labled “Account Policies”, “Event Logs”, and “System Services”. For example, in the system services section the “Internet Connection Firewall” service should be set to automatic startup and if this server is to be remotely administered the “Remote Desktop” service should be enabled.

To configure the system with the new imported security settings from the template right-click the Security Configuration and Analysis node and select Configure System Now.

This will prompt for a log file location. Navigate to c:\securitytemplates\ folder, name the log file and click OK.

When the configuration has completed system, the system is configured with the settings specified in the merged template file. The effective merged template can be now exported to an .inf file for future analysis and adjustments. *Warning – Do not export this template and apply it to another server. This inf file will contain security identifiers (SID) that will be specific to this server.