I apologize in advanced for anything that is no technically correct in the following. I am a beginner with server technology, and have only had about less than a month's experience with it.
Is there any way to block roles and features from being added to a Windows 2008 or a Windows 2012 server? I've been tasked with creating an IIS server and ensuring that only IIS can run, by using AppLocker. I've used AppLocker to block most executables (except those still required), but since I want to keep Server Manager, it is still ossible to add more roles and features. Is there anyway to disable this?
Thank you for any help, and once again, sorry something is technically incorrect, I will clarify if needed, and if I can.