This document is only a guide containing recommended security settings. It is not meant to replace well-structured policy or sound judgment. Furthermore this guide does not address site-specific configuration issues. Care must be taken when implementing this guide to address local operational and policy concerns. The security changes described in this document only apply to Microsoft Windows 2000 systems and should not be applied to any other Windows 2000 versions or operating systems.

This document contains possible recommended settings for the system Registry. Windows 2000 System Internet Information Services 5.0 can be severely impaired or disabled with incorrect changes or accidental deletions when using a Registry editor (Regedt32.exe or Regedit.exe) to change the system configuration. There is no “undo” command for deletions within the Registry. Registry editor prompts user to confirm the deletions if “Confirm on Delete” is selected from the options menu. When user deletes a key, the message does not include the name of the key being deleted. Check selection carefully before proceeding.

Download pdf Guide to the Secure Configuration and Administration of Microsoft Internet Information Services 5.0