Hi there I am a good programmer and also a complete newbie in windows administration so apologies for my fist question in serverfault. So I've just got a new server machine that I'm planning to host my company website on. I've created a vm with Windows Server 2012 and I've installed IIS and the site is up and running. The question is if I am going to use that vm just for hosting that single website what do I need to disable/enable just to make sure that no other services are open and listening for some sort of other connections (thus exposing the vm for more attacks)? Or are there any tools to scan the IP address for any known vulnerabilities? Everything that the website needs to function properly is already installed on the same VM and it does not need to connect to any "remote" machines (sql server is installed on the same VM). Thanks in advance.
closed as too broad by Grant, Katherine Villyard, 84104, fukawi2, Scott Pack Apr 16 '15 at 3:46
Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.
A couple of things I would recommend disabling are 'Client for Microsoft Networks' and 'File and Printer Sharing for Microsoft Networks'. To get to those, go to the Network and Sharing Center, click on Change adapter settings, and then right click the network card(s) and select Properties.
Just untick the network services you don't need.
There may be plenty of other things to look at, but this will certainly reduce the exposed footprint of the machine.