"Microsoft Active Directory and Group Policy have a feature-rich set of
tools and processes to help save an administrator time and energy in
maintaining security within the domain. Locking down a server requires
many steps to complete, and depending on the extent to which the server
is locked down, it can take up to several hours. This paper is
primarily written for system administrators who want to make their life
managing IIS easier using scripts with Active Directory and Group
Policy. " – securityfocus
Basic IIS Lockdown Using Scripts and Group Policy
Favorite Links
- Security Templates (New)
- The Web Application Security Consortium
- QA Security
- The Web Security Mailing List
- Romain Gaucher’s Blog
- Jeremiah Grossman’s Blog
Popular Pages
WASC Threat Classification
- Abuse of Functionality
- Application Misconfiguration
- Brute Force Attack
- Content Spoofing
- Credential/Session Prediction
- Denial of Service
- Directory Indexing
- Information Leakage
- Remote File Inclusion Attack
- Routing Detour Attack
- SOAP Array Abuse
- XML Attribute Blowup
- XML Injection
- XML External Entity Attack