I know very little about IIS. I have a Win2008 R2 server, and IIS Manager shows 3 sites under the web server. I want to disable 2 of them (one is the default web site), leaving only the 3rd running and accessible.
I stopped them, and set them to not automatically start. What I'd like to do is ensure that they are disabled, and can't start. I keep finding search results that indicate making changes to the Directory Security, which will do that. And I don't see any icon that says Directory Security, nor on any right click of a site, etc. What am I misunderstanding here? How can I disable these 2 sites, so I can be sure they don't start? (I don't know if they will be needed again, hence why I don't want to delete them)

