Security Configuration and Analysis Tool IIS Templates

Server-only: This tool is included in the Windows 2000 Server Resource Kit only.

Setting security policy on a Web server by hand is both tedious and error-prone. In Microsoft® Windows® 2000, security policies can be easily standardized and implemented by means of security templates. A security template is a physical file representation of a security configuration. The Windows 2000 Resource Kit includes two IIS-specific security templates:

• Secure Internet Web Server template
• Secure Intranet Web Server template

These templates are designed for use with the Security Configuration and Analysis snap-in, a Windows 2000 tool that provides a single point of administration for Windows 2000 system security. The Security Configuration and Analysis tool allows an administrator to:

• Define one or more security policies based on the role of the computer.
• Configure a server to match a security policy.
• Audit a server against an existing policy and report differences.

Note

For more information about the Security Configuration and Analysis tool, the Security Configuration Tool Set, and other issues regarding Windows 2000 security, see Windows 2000 Server online Help.

IIS Security Configuration Templates Topics

• Using the IIS Security Configuration Templates

Files Required

• SecureInternetWebServer.inf
• SecureIntranetWebServer.inf
• Sectemplates.msc