Skip to Content
Learning Windows Server 2003
book

Learning Windows Server 2003

by Jonathan Hassell
December 2004
Beginner
672 pages
20h 38m
English
O'Reilly Media, Inc.
Content preview from Learning Windows Server 2003

Securing it All

Ever since the Gartner Report stated that anyone using IIS as a production web server should immediately migrate to Apache, the popular Unix web server, Microsoft’s web platform has gotten quite a bad rap. And a lot of it was deserved: buffer overflows, what seems like 10 security bulletins each week, worms that take over computers faster than they can be secured while on the network, and so on. Part of the problem was that the version of IIS included with Windows NT and Windows 2000, versions 4 and 5, respectively, were lax in their default permissions: everyone could do everything at any given time. Even the fact that IIS was installed by default during a Windows installation was a bad move: it didn’t matter if you didn’t want a web server because you got one anyway.

Those who prey on insecure web servers rely on users who are lax, lazy, or unknowledgeable about keeping their servers hardened and updated. Essentially, the climate of the Internet has degenerated into a situation in which even innocent users that get penetrated are used as attack vectors against other innocent but open servers. The responsibility lies not just with the attackers who promulgate these worms, but also with the administrators who allow their machines to be used like toys.

In this section, I’ll look at nine simple steps you can take to make sure you’re not a victim, and that you’re not an accessory to the hackers.

Enable IIS Only if You Use It

Although it’s probably the simplest suggestion ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

Windows Server 2008: The Definitive Guide

Windows Server 2008: The Definitive Guide

Jonathan Hassell
Mastering Windows Server 2012 R2

Mastering Windows Server 2012 R2

Mark Minasi, Kevin Greene, Christian Booth, Robert Butler, John McCabe, Robert Panek, Michael Rice, Stefan Roth
Windows Server 2016: Unleashed

Windows Server 2016: Unleashed

Rand Morimoto, Jeffrey Shapiro, Guy Yardeni, Omar Droubi, Michael Noel, Andrew Abbate, Chris Amaris

Publisher Resources

ISBN: 0596006241Catalog PageErrata