How To Lock Microsoft TV Server by Using the IISLockDown Utility

The Internet Information Services (IIS) security IIS Lockdown utility works by turning off unnecessary features, which reduces the attack surface that is available to unauthorized users. To provide multiple layers of protection against unauthorized users, URLscan, with customized templates for each supported server role (Microsoft TV Server, for example), is integrated into the IIS Lockdown Wizard. You can make Microsoft TV Server more secure by configuring this utility correctly. Select the most restrictive configuration that meets your specific business needs.

The IISLockdown utility can perform many steps to help secure Web servers, such as the following:

• Lock files.
• Turn off services and components.
• Install URLscan.
• Remove unnecessary Internet server application programming interface (ISAPI) DLL scripting.
• Remove unnecessary directories.
• Change ACLs.

Install IISLockdown

To install IISLockdown, follow these steps:

1. Visit the following Microsoft Web site to download Iislockd.exe:
   http://technet.microsoft.com/en-us/library/dd450372.aspx (http://technet.microsoft.com/en-us/library/dd450372.aspx)
2. Run Iislockd.exe. Follow the installation instructions. Use your deployment requirements to set the options in the installation wizard.
   
   NOTE: You can customize your IIS installation to meet your specific needs. To verify that the business functionality that you require still exists after you install IIS Lockdown, you must complete rigorous, formal testing in you own business environment. If you discover unfavorable results during your testing, please open a case with Microsoft Product Support Services (PSS).

For more information about URLScan, visit the following Microsoft Web site: For additional information about how to configure URLScan, click the following article numbers to view the articles in the Microsoft Knowledge Base: