MSADC and Script Virtual Directories on IIS

Issue

This check determines whether the MSADC (sample data access scripts) and Scripts virtual directories are installed on a scanned Internet Information Services (IIS) computer. These directories typically contain scripts that, if not required, should be removed to help reduce the attack surface of the computer.

Solution

It is recommended to remove these virtual directories if they are not required on the IIS computer.

Instructions

To start Internet Information Services Manager in Windows XP Professional

• Click Start, point to Control Panel, point to Administrative Tools, and then click Internet Information Services.

To start Internet Information Services Manager in Windows 2000

• Click Start, point to Programs, point to Administrative Tools, and then click Internet Services Manager.

To start Internet Information Services Manager in Windows NT

• Click Start, point to Programs, point to Windows NT 4.0 Option Pack, point to Microsoft Internet Information Server, and then click Internet Service Manager.

In the Internet Information Services Manager, right-click the virtual directories to remove, and then click Delete.

Additional Resources

IIS Lockdown Tool

IIS 4 Baseline Security Checklist

IIS 5 Baseline Security Checklist

⌐ 2002 Microsoft Corporation. All rights reserved.