Windows 2000 ISS Configuration Tool

Microsoft’s Security Response Center announced today the availability of version 1.0 of the Windows 2000 Internet Server Security Configuration Tool. You can download it from FileForum.

According to the announcement:

“The tool makes it easy to secure a web server running IIS 5.0. It conducts an interview to determine what services you want to provide and the general way that you'd like for the server to operate, then generates and deploys a policy to configure the server appropriately.”

You can download the tool directly from Microsoft here, or from FileForum.

Microsoft notes that: before using the tool, be sure to read the Readme file included with it.
The tool errs on the side of caution, and locks down many aspects of the system. It's important
that you understand the effects this can have before deciding whether to lock down your server.

Micorsoft will be developing an advanced version of the tool, and also plans on deploying more security ‘checklists’.