• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 176
  • Last Modified:

Setting up and implementing a hardend W2K3 webserver.

Greetings all,

I have been tasked with a little challange. I just started a new job and when they were showing me around somebody pointed to a dusty ancient cpu in the corner and said "that's our web server". My immediate response was, "Oh my God, it has a turbo button!". OK, needless to say I have aquired a new server and done a fresh install of W2K3 server web edition (RAID 1 array). I've never implemented a web server and I need to know what services, software, and security templates I need to apply to get our website moved and put this poor P1 box out to pasture.

Thanks for any guidance you can offer,

-Norris
0
Norris04
Asked:
Norris04
1 Solution
 
TMWSIYCommented:
Win 2003 is good about not install a bunch of crap you dont need.  FTP and
SMTP are installed seperate from IIS.  Make sure you get all your update for 2003 and IIS.  Then run the iislockdown tool from microsoft.com.  Then run the baseline security tool also from MS.  it will tell you what you need to do to secure your server.

Make sure you dont allow anything you dont need on the server.  IIS 6 is good about this as well.  Dont allow aspx  pages if you dont need them etc.  I dont even think you can run asp pages by default with out switching them on.

Any specifics just let us know!

HTH
Trey

I got rid of my last "turbo" server last year lol!
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now