The Internet Information Services (IIS) Lockdown Tool works by turning off unnecessary IIS features and components to reduce the attack surface of the Web server. To assist in mitigating these potential risks, remove any unnecessary virtual directories.
▸ To remove a virtual directory using IIS Manager
In IIS Manager, expand the site containing the virtual directory you want to remove, right-click the virtual directory, and then click Delete.
▸ To remove a virtual directory using Windows Explorer
In Windows Explorer, browse to the folder containing the virtual directory you want to remove, right-click the directory, and then click Sharing and Security.
Click the Web Sharing tab, click Remove, and then click Yes ...