Controlling IIS Installation
Microsoft Internet Information Services (IIS) can pose a security risk when it is installed on a computer that hasn’t been specifically designated for use as a Web or application server. To prevent IIS from being installed on a computer running Windows Server 2003, you can enable the Prevent IIS Installation policy. This policy prevents IIS installation for all users, including administrators. Although this in turn might prevent installation of Windows components or programs that require IIS to run, it doesn’t have any effect on IIS if IIS is already installed on a computer.
To get a better understanding of how the Prevent IIS Installation policy might be used, consider a scenario in which you want to enhance security ...
Get Microsoft® Windows® Group Policy Guide now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
