Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have Windows Server 2008, with IIS 7.5 and SQL Server 2008. I want to install DotNetNuke which is an ASP.NET application. What are the necessary precautions to not to get pwn3d.

share|improve this question

closed as too broad by kce, mdpc, Falcon Momot, Ward, gWaldo Aug 29 '13 at 13:31

There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.

up vote 3 down vote accepted

This is a very open ended question I think. Use your favorite search engine to search for:
"iis7 hardnening" or "sql 2008 hardening" (etc.) and it should get you started.

Here are some examples of good hardening practices:
SQL 2008
Windows Server 2008

share|improve this answer

Outside standard configuration settings such as strong password enforcement in windows/sql, and even for users in the application, and web site precautions for XSS and other common attacks, you also want to make sure that the application is secured, any configuration files with connection strings or passwords encrypted, security data encrypted too (that you store in SQL Server), and so on.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.