Instead of tarring Microsoft with your broad brush, lets be fair instead. The Microsoft security articles show that setting up tight security on Win 2000 and NT4 is not nearly as difficult as many think. Experience with many servers hardened the "Microsoft way", shows that their procedures are excellent if they are all carefully followed.
The problem with MS is that the current OSes do not come "locked down" secure out-of-the-box. But then for that matter nor do all versions of Linux. Regards, Yaakov ---------------------------------------- Yaakov Yehudi Security Administrator [EMAIL PROTECTED] Phone : +972-2-5317361 Fax : +972-2-5317095 Project Tehila Ministry Of Finance 1 Kaplan St. Jerusalem Israel ---------------------------------------- ----- Original Message ----- From: "Douglas Gullett" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: December 21, 2001 21:41 Subject: RE: Locking down IIS > Well, that would be a start, but Microsoft has a habit of suggesting the > "whitewash" method of security..."let's pretend there is nothing wrong"! > > I would suggest http://www.cert.org/ > > They have plenty of information on securing your computer. Also a less > biased viewpoint! > > Happy New Year! > > Doug G > > > -----Original Message----- > > From: David Carter [mailto:[EMAIL PROTECTED]] > > Sent: Friday, December 21, 2001 8:36 AM > > To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > > Subject: Re: Locking down IIS > > > > > > Look at the vendors site. http://www.microsoft.com/security . Microsoft > > has alot of White Papers on how to and best practices for > > securing W2K and > > IIS. > > > > Dave > > > > > > >From: "James Kelty" <[EMAIL PROTECTED]> > > >To: <[EMAIL PROTECTED]> > > >Subject: Locking down IIS > > >Date: Thu, 20 Dec 2001 09:10:38 -0800 > > > > > >Hello! > > > > > >I was wondering if someone could point me in the right direction > > to books, > > >and or web sites that will lay out the best way to lock down, > > bastionize, a > > >win2k/IIS 5.0 server. Thanks! > > > > > >-James > > > > > > > > > > > > > > > > _________________________________________________________________ > > Send and receive Hotmail on your mobile device: http://mobile.msn.com > > > > >