The IIS Lockdown Wizard Undo Feature Does Not Restore Uninstalled Services

View products that this article applies to.

This article was previously published under Q311113

We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 7.0 running on Microsoft Windows Server 2008. IIS 7.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx (http://www.microsoft.com/technet/security/prodtech/IIS.mspx)

For more information about IIS 7.0, visit the following Microsoft Web site:

http://www.iis.net/default.aspx?tabid=1 (http://www.iis.net/default.aspx?tabid=1)

Expand all | Collapse all

SYMPTOMS

In the Internet Information Services (IIS) Lockdown Wizard, administrators can choose the option to uninstall unused services. This configuration option cannot be undone by using the undo operation in the IIS Lockdown Wizard.

Back to the top

CAUSE

When you run the IIS Lockdown Wizard, it creates a log file named Oblt-log.log that records the security configuration changes that are made. There is an option available in the wizard that you can select to uninstall the services that are not in use. The Oblt-log.log file, which is used when you use the wizard to undo a previous configuration, does not record that the services have been uninstalled. As a result, the undo feature does not restore any previously uninstalled services.

Back to the top