MS releases IIS ‘lockdown’ utility. Apparently, not all sysadmins appreciate having to disable 10 different auxiliary services and set up secure file permissions manually on each and every new IIS installation. I’d say “better late than never,” but that would still give Microsoft too much credit.
The utility is here. Oh, did I mention it’s for IIS 5 only? You are running IIS 5, aren’t you? You do know that IIS 5 only runs on Windows 2000 and above, don’t you? You have upgraded all your servers to Windows 2000, haven’t you? Better get moving; once Windows XP server is released, NT 4 will become officially unsupported. That means no more service packs. No more IIS hotfixes. The response will be “sorry, upgrade to IIS 5 — it’s free with Windows…2000.”
This is what it feels like to fall off the back of the wagon.
§
I am no longer accepting public comments on this post, but you can use this form to contact me privately. (Your message will not be published.)
§
firehose ‧ code ‧ music ‧ planet
© 2001–8 Mark Pilgrim