RE: IIS on an Exchange 2000 box

2002-04-13 Thread daniele
Title: RE: IIS on an Exchange 2000 box









Gota try at least.



-Original Message-
From: Zangara, Jim
[mailto:[EMAIL PROTECTED]] 
Sent: Friday, April 12, 2002 12:51
PM
To: MS-Exchange Admin Issues
Subject: RE: IIS on an Exchange
2000 box



SecureIIS!!! 

Jim Zangara, MCSE+I, A+ 
IT Manager 
Special Projects Engineer 
Premiere Radio Networks 
A Division of Clear Channel
Communications 
15260 Ventura Blvd Suite 500 
Sherman Oaks, CA 91403 
Direct: (818) 461-8620 
mailto:[EMAIL PROTECTED] 

Advertising may be described as the science of
arresting the human intelligence long enough to get money from it. 



-Original Message- 
From: daniele [mailto:[EMAIL PROTECTED]] 
Sent: Friday, April 12, 2002 11:50
AM 
To: MS-Exchange Admin Issues

Subject: IIS on an Exchange 2000
box 



Seeing one must use IIS on a Windows 2000 box running
Exchange 2000 if one wants to use the Outlook Web Access. 
 
What is the proper method to
lockdown IIS under this environment? 
 
I know of the lockdown utility,
however is that the best method? 
 
Daniele 
.+- 
 
@A+a
0 z[lpjoZ \ૅzm 

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm






ŠËB…ªíz¶§tPjØm¶ŸÿÃ,ºvޖÛ(~Ü­ç(›÷±r§éb²×!j»^®f

RE: IIS on an Exchange 2000 box

2002-04-13 Thread Benjamin Zachary
Title: Message



Besides making sure i have all the secure updates I usually do the 
following:

Stop 
Admin Web site
Create 
New Empty Site
Install OWA into the empty site
add 
host header for mail.domain.com
remove 
the following if they exist: scripts/printers/cgi-bin/anything you dont 
require
change 
to clear text authentication if you dont have other means of using 
OWA
Also 
make sure the .hta doesnt run which should be handled by the latest security 
packs.

I 
think thats about it. Theres a whole bunch of stuff in the default web site that 
need to be removed..



  
  -Original Message-From: daniele 
  [mailto:[EMAIL PROTECTED]] Sent: Saturday, April 13, 2002 4:30 
  AMTo: MS-Exchange Admin IssuesSubject: RE: IIS on an 
  Exchange 2000 box
  
  Gota try at 
  least.
  
  -Original 
  Message-From: Zangara, 
  Jim [mailto:[EMAIL PROTECTED]] Sent: Friday, April 12, 2002 12:51 
  PMTo: MS-Exchange Admin 
  IssuesSubject: RE: IIS on an 
  Exchange 2000 box
  
  SecureIIS!!! 
  Jim Zangara, MCSE+I, A+ IT Manager Special Projects Engineer 
  Premiere Radio 
  Networks A 
  Division of Clear Channel Communications 15260 Ventura Blvd Suite 500 Sherman Oaks, CA 91403 
  Direct: (818) 
  461-8620 mailto:[EMAIL PROTECTED] 
  
  Advertising may be described as the science of 
  arresting the human intelligence long enough to get money from it. 
  
  
  -Original Message- From: daniele [mailto:[EMAIL PROTECTED]] 
  Sent: Friday, 
  April 12, 2002 11:50 AM To: MS-Exchange Admin Issues Subject: IIS on an Exchange 2000 
  box 
  
  Seeing one must use IIS on a Windows 2000 box running 
  Exchange 2000 if one wants to use the Outlook Web Access. 
   What is the proper method to lockdown IIS 
  under this environment?  I know of the lockdown utility, however is that the 
  best method?  Daniele .+- @A+a0 z[lpjoZ 
  \?zm 
  List Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
Disclaimer Notice : Note this is a disclaimer

RE: IIS on an Exchange 2000 box

2002-04-12 Thread Zangara, Jim
Title: RE: IIS on an Exchange 2000 box





SecureIIS!!!


Jim Zangara, MCSE+I, A+
IT Manager
Special Projects Engineer 
Premiere Radio Networks 
A Division of Clear Channel Communications 
15260 Ventura Blvd Suite 500 
Sherman Oaks, CA 91403 
Direct: (818) 461-8620 
mailto:[EMAIL PROTECTED] 


Advertising may be described as the science of arresting the human intelligence long enough to get money from it. 



-Original Message-
From: daniele [mailto:[EMAIL PROTECTED]] 
Sent: Friday, April 12, 2002 11:50 AM
To: MS-Exchange Admin Issues
Subject: IIS on an Exchange 2000 box



Seeing one must use IIS on a Windows 2000 box running Exchange 2000 if one wants to use the Outlook Web Access.

What is the proper method to lockdown IIS under this environment?

I know of the lockdown utility, however is that the best method?

Daniele
.+-

@A+a0 z[lpjoZ \ૅzm



List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm