CIS IIS Benchmark version 1.0

Center for Internet Security Benchmark for IIS 5.0 and 6.0 for Microsoft Windows 2000, XP, and Server 2003 Version 1.0 August 15, 2007 Copyright 2001-2007, The Center for Internet Security (CIS) Editor: Shyama Rose Leviathan Security Group http://cisecurity.org cis-feedback@cisecurity.org Table of Contents  TERMS OF USE AGREEMENT ................................................................................ 4 Introduction ................................................................................................................... 7 Applicability .................................................................................................................. 7 1 - Legacy IIS settings ................................................................................................... 8 1.1 Default Install Files8 1.2 Remote Data Services (RDS) .................................................................................... 8 1.3 Internet Printing ........................................................................................................ 9 1.4 URLScan ................................................................................................................. 10 1.5 IIS Lockdown .......................................................................................................... 10 2 - IIS Configuration (Services) ................................................................................. 11 2.1 FTP ...