We are setting up our first Windows Server 2008 web server (previously we used Linux/Apache for all web servers), and I was hoping to get some helpful tips for setting it up and securing our installation.

We will have one web server and one database server (SQL Server 2008) to start, running IIS 7 (obviously I guess). All web pages will be SSL encrypted (i.e. https://).


IIS.net contains MANY useful documents.



You could check "Securing ..." articles from Microsoft. One example:

Securing IIS7 - Windows Server 2008 Security Guide

  • Wtf? Can't the down-voter at least leave a comment?
    – TFM
    Aug 7 '09 at 15:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.