The IIS Lockdown Wizard Undo Feature Does Not Restore Uninstalled Services

This article was previously published under Q311113
This article has been archived. It is offered "as is" and will no longer be updated.
We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 7.0 running on Microsoft Windows Server 2008. IIS 7.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:For more information about IIS 7.0, visit the following Microsoft Web site:
In the Internet Information Services (IIS) Lockdown Wizard, administrators can choose the option to uninstall unused services. This configuration option cannot be undone by using the undo operation in the IIS Lockdown Wizard.
When you run the IIS Lockdown Wizard, it creates a log file named Oblt-log.log that records the security configuration changes that are made. There is an option available in the wizard that you can select to uninstall the services that are not in use. The Oblt-log.log file, which is used when you use the wizard to undo a previous configuration, does not record that the services have been uninstalled. As a result, the undo feature does not restore any previously uninstalled services.
More information
For additional information, click the article number below to view the article in the Microsoft Knowledge Base:
310725 HOWTO: Run the IIS Lockdown Wizard Unattended
iis lockdown oblt-log.log uninstall services

Article ID: 311113 - Last Review: 10/26/2013 12:21:00 - Revision: 5.0

  • kbnosurvey kbarchive kbpending kbprb KB311113