Microsoft® Windows® Group Policy Guide
by The Microsoft Group Policy Team, Darren Mar-Elia, Derek Melber, William R. Stanek
Controlling IIS Installation
Microsoft Internet Information Services (IIS) can pose a security risk when it is installed on a computer that hasn’t been specifically designated for use as a Web or application server. To prevent IIS from being installed on a computer running Windows Server 2003, you can enable the Prevent IIS Installation policy. This policy prevents IIS installation for all users, including administrators. Although this in turn might prevent installation of Windows components or programs that require IIS to run, it doesn’t have any effect on IIS if IIS is already installed on a computer.
To get a better understanding of how the Prevent IIS Installation policy might be used, consider a scenario in which you want to enhance security ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access