[Home]  [Edit this page]  [Recent Changes]  [Special Pages]  [Help] 

---

IISFAQSecurity

---

Back to IIS FAQ Main Page.

This page contains some ideas on how you can secure your IIS WEB-Server.

Remove unused extensions

Removing all unused application mappings is a good idea to secure your server.

1. Open the server properties page
2. Click on the Home Directory tag
3. Click on Configuration
4. Remove all Application Mappings that you are sure you do not use. For example you can remove .ida, .idq, .htr, .printer ..

Disable WebDAV

IF you don't use the Distributed Authoring and Versioning (DAV) extensions you can disable it by adding the following key to the registry.

Start Registry Editor (Regedt32.exe). Locate and click the following key in the registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters

On the Edit menu, click Add Value, and then add the following registry value:

Value name: DisableWebDAV
Data type:  DWORD
Value data: 1

More information can be found on Microsoft's WEB here

Please note that you use Registry Editor at your own risk!

Use the Lockdown tool

IIS server security can be tightend by installing and running the IIS Lockdown Tool from Microsoft.

You can download this tool here

More information can be found here.
[Edit this page]  [Page history]  [What links here]  [Discuss this topic]  [Printer Friendly]