Feeds

Microsoft (finally) tries to make IIS secure

'Lockdown Wizard' enforces safe serving

  • alert
  • submit to reddit

The essential guide to IT transformation

We used to think it would take an act of Congress, but Microsoft has taken the initiative and released a free tool which will set up IIS with tight settings and crucial patches from day one, shifting the emphasis from come-and-get-me-k11d13z 'functionality' to something approaching decent security.

One may download the software or arrange to have an installation CD delivered free to their door, assuming they have a Passport and are actually willing to lard it with accurate information.

"The Security Tool Kit will contain the current service packs, all critical security patches for Windows NT 4.0 and Windows 2000, Internet Information Server and Internet Explorer, and a security tool that will tie back to the Windows Update site and ensure that any late-breaking patches also are installed," the company explains.

It only took Code Red and Nimda to accomplish this. Never let it be said that Redmond doesn't respond swiftly to repeated, gross humiliations.

The company is also offering free tech support for security issues. US residents may ring toll-free on 1-866-727-2338 for virus and security information. ®

Related Link
Get the goods

The essential guide to IT transformation

More from The Register

next story
Apple promises to lift Curse of the Drained iPhone 5 Battery
Have you tried turning it off and...? Never mind, here's a replacement
China: You, Microsoft. Office-Windows 'compatibility'. You have 20 days to explain
Told to cough up more details as antitrust probe goes deeper
Linux turns 23 and Linus Torvalds celebrates as only he can
No, not with swearing, but by controlling the release cycle
Scratched PC-dispatch patch patched, hatched in batch rematch
Windows security update fixed after triggering blue screens (and screams) of death
This is how I set about making a fortune with my own startup
Would you leave your well-paid job to chase your dream?
prev story

Whitepapers

Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Advanced data protection for your virtualized environments
Find a natural fit for optimizing protection for the often resource-constrained data protection process found in virtual environments.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.