WG195 IIS6 – Anonymous access accounts must be restricted.
Details Many of the security problems that occur are not the result of a user gaining access to files or...
- Home
- Security Hardening
- DISA STIG IIS 6.0 Server V6R16
DISA STIG IIS 6.0 Server V6R16
WG200 IIS6 – Non-administrators must not be allowed access to the directory tree, the shell, or other utilities. – ‘cmd.exe’
Details As a rule, accounts on a web server are to be kept to a minimum. Only administrators, web managers,...WG204 IIS6 – A web server must not be co-hosted with other services
Details A detailed web server installation and configuration plan should be followed to provide standardization during the installation process. The...WG220 IIS6 – Access to web administration tools must be restricted to the Web Manager and the Web Manager’s designees.
Details The key web service administrative and configuration tools must only be accessible by the web server staff. All users...WG300 IIS6 – Web server system files must conform to minimum file permission requirements. – ‘inetpub’
Details This check verifies the key web server system configuration files are owned by the SA or Web Manager controlled...WG300 IIS6 – Web server system files must conform to minimum file permission requirements. – ‘inetpubAdminScripts’
Details This check verifies the key web server system configuration files are owned by the SA or Web Manager controlled...WG300 IIS6 – Web server system files must conform to minimum file permission requirements. – ‘inetpubftproot’
Details This check verifies the key web server system configuration files are owned by the SA or Web Manager controlled...WG300 IIS6 – Web server system files must conform to minimum file permission requirements. – ‘inetpubftprootdropbox’
Details This check verifies the key web server system configuration files are owned by the SA or Web Manager controlled...WG300 IIS6 – Web server system files must conform to minimum file permission requirements. – ‘inetpubftprootftpfiles’
Details This check verifies the key web server system configuration files are owned by the SA or Web Manager controlled...WG300 IIS6 – Web server system files must conform to minimum file permission requirements. – ‘system32inetsrvdata’
Details This check verifies the key web server system configuration files are owned by the SA or Web Manager controlled...