They are probably referring to disabling IUSER. The easiest thing to do (in my opinion), is to go to the NTFS roots of those websites and set the NTFS security so only administrators can read the folders. Otherwise you have to fiddle around with config files.
-----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Michael Leone Sent: Monday, September 11, 2017 2:38 PM To: [email protected] Subject: [NTSysADM] Disabling a web site in IIS I know very little about IIS. I have a Win2008 R2 server, and IIS Manager shows 3 sites under the web server. I want to disable 2 of them (one is the default web site), leaving only the 3rd running and accessible. I stopped them, and set them to not automatically start. What I'd like to do is ensure that they are disabled, and can't start. I keep finding search results that indicate making changes to the Directory Security, which will do that. And I don't see any icon that says Directory Security, nor on any right click of a site, etc. What am I misunderstanding here? How can I disable these 2 sites, so I can be sure they don't start? (I don't know if they will be needed again, hence why I don't want to delete them)

