Locking down IIS on a Unity box

[admin_2]

Here's one:<br><br>Does anyone know if there are any problems with locking down IIS4 on a Unity box in accordance to MicroSoft's security checklist? This would include things like disabling the admin website and deleting script mappings and parent pathing. Any thoughts?<br><br>

[#2]

Well... I'd probably have to see that checklist you're working with and try it to be sure. Technically there's no reason you can't do that as long as you don't change the settings on the SAWeb/Status web pages. This shouldn't be a big problem because we require NT authentication when accessing the pages (no anonymous or clear text attempts are even allowed). The only thing on our pages is that you have to allow scripts to be executed which sometimes causes folks stress.

if you leave our page properties alone I don't see any reason why you can't lock it down.

Jeff Lindborg
Unity Product Architect/Answer Monkey
Cisco Systems
lindborg@cisco.com
http://www.AnswerMonkey.net (new page for Unity support tools and scripts)