Here's an e-mail from Microsoft regarding this:
Hi All -
Microsoft is pleased to announce that version 1.0 of the Windows 2000
Internet Server Security Configuration Tool is available for download
and use. The tool makes it easy to secure a web server running IIS
5.0. It conducts an interview to determine what services you want to
provide and the general way that you'd like for the server to operate,
then generates and deploys a policy to configure the server
appropriately.
The tool is available for download at
http://www.microsoft.com/technet/security/tools.asp. Before using the
tool, please be sure to read the Readme file included with it. The
tool errs on the side of caution, and locks down many aspects of the
system. It's important that you understand the effects this can have
before deciding whether to lock down your server.
We will be developing an advanced version of the tool, and also are
deploying more security checklists. All of these can be downloaded
from http://www.microsoft.com/technet/security/tools.asp. Regards,
[EMAIL PROTECTED]
----- Original Message -----
From: Nick Call <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, April 03, 2000 3:42 PM
Subject: OT- server security holes
> Fellow listees:
>
> A while back Michael Grundvig sent me a basic report generated from a free
> program that checks NT servers for security holes, especially in IIS.
> Anyone know where I can download a program that does this?
>
> Thanks in advance.
> Nick Call
> [EMAIL PROTECTED]
> http://www.accessutah.com
>
>
> --------------------------------------------------------------------------
----
> Archives: http://www.eGroups.com/list/cf-talk
> To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in
the body.
------------------------------------------------------------------------------
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.
