Internet Information Services
Version 8.0 of web server (IIS) is the default version included with Windows Server 2012. In Microsoft terms, it is considered as secured by default. However, based on your requirements, you may need to tweak the configuration to achieve maximum security. Also, the modular approach of web server in Windows Server 2012 will help you to select or deselect web server components during the installation. Only required and selected components will be on the server. The other web server components and modules can be installed on an as-needed basis. The default installation will only support the static components to support maximum threat.
An administrator can use the following task list as a starting point for their web server security configuration:
- Operating system type: Use the Windows Server Core operating system
- Baseline security: Create and implement server baseline security
- Web server component selection: Install only the required components
- Web server role feature...
