Securing the NT and IIS "turn"

Finishing: Cjj < mailto:cjj7513@hotmail.com >
Source: http://www.shebeen.com/iis4_nt4sec.htm
Original Author: Gavin Reid gavin@shebeen.com
This article is only intended for use with the NTS 4.0 system running IIS 4.0, and if there are other applications on the server (such as cold Fusion), then the security of these applications must be ensured at the same time. The method described below should be performed when a new system is installed to avoid unpredictable results. Also note that this method should not be used on an internal network, such as a file server, because it removes some of the NT-used default services.
First, installation
1. All partitions are NTFS
The server chooses a stand-alone server and does not select the PDC
Select a workgroup member, do not select a domain
2. Install IE 4.0 SP2, do not install Active Desktop
3. Install the latest Service pack: SP6a
Install the latest hot patches:
q241041 enabling NetBT to Open IP Ports exclusively
q243404 WinObj. EXE may let you View Securable Objects created/opened by JET500. Dll
q243405 Device Drivers Create their corresponding deviceobject with File_device_secure_open Device characteristics
q244599 fixes Required in TCSEC C2 security evaluation Configuration for Windows NT 4.0 Service Pack 6a. Windows NT appears to Hang when your Log is installing Service Pack 6.
q188806 NTFS Alternate Data Stream Name of a File may return Source
q252463 Security Update, April 13, 2000
q267559 Security Update, July 17, 2000
q269862 Security Update, August 15, 2000
q271652 Security Update, September 8, 2000
4. Install Option Pack:
Select a Custom installation:
Install only the following components:
[_] Internet Information Server
[_] Internet Service Manager
[_] World Wide Web Server
[_] Microsoft Data Access Components 1.5