Welcome to MobyThreads.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in
All support for the MobyThreads Threaded phpBB MOD can now be found on welsolutions at this forum

Recommended Registry Hardening - registry keys are not pre..

 
   Web Hosting and Web Master Forums (Home) -> IIS RSS
Next:  Directing Hosts to Different URLs?  
Author Message
dougmunday

External


Since: Dec 07, 2004
Posts: 8



(Msg. 1) Posted: Tue Dec 14, 2004 2:07 pm
Post subject: Recommended Registry Hardening - registry keys are not present?
Archived from groups: microsoft>public>inetserver>iis (more info?)

I am trying to follow the steps in Microsoft's "From Blueprint to Fortress: A
Guide to securing IIS 5.0" under "Registry Hardening". It states to edit the
following registry keys or values:

Topic: SYN Flood Attack Protection
Key: HKLM\System\CurrentControlsSet\Services\TCPIP\Parameters
Value: Value type
Problem: No such value - should I add it?

Topic: Disable Internet Printing
Key: HKLM\Software\Policies\Microsoft\Windows NT\Printers\DisableWebPrinting
Value: DisableWebPrinting
Problem: There is no Windows NT key. There is a Windows key, but no Printer
key under it??

Removing Administrative Shares
Key: HKLM\system\CurrentControlSet\Services\lanmanserver\parameters
Value: AutoShareServer
Problem: No such value. Should it be added? Instructions say to edit
it....??

W2K SP4, IIS 5.0.

Thanks for any clearification.

Doug

 >> Stay informed about: Recommended Registry Hardening - registry keys are not pre.. 
Back to top
Login to vote
lists

External


Since: Apr 22, 2004
Posts: 390



(Msg. 2) Posted: Tue Dec 14, 2004 7:35 pm
Post subject: Re: Recommended Registry Hardening - registry keys are not present? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

I have written a few security tips at:

<a style='text-decoration: underline;' href="http://www.serverautomationtools.com/pubs/sattools/john_on_automation/somesecuritysettings.html" target="_blank">http://www.serverautomationtools.com/pubs/sattools/john_on_automation/...esecuri</a>

John Cesta

iMAIL Reporter - Reports on iMAIL server and POP users
LogFileManager - IIS LogFile Management Tool
WebPageChecker - Helps Maintain Server UpTime
DomainReportIt PRO - Helps Rebuild IIS
<a style='text-decoration: underline;' href="http://www.serverautomationtools.com" target="_blank">http://www.serverautomationtools.com</a>

On Tue, 14 Dec 2004 14:07:07 -0800, "DougMunday"
<DougMunday.DeleteThis@discussions.microsoft.com> wrote:

 >I am trying to follow the steps in Microsoft's "From Blueprint to Fortress: A
 >Guide to securing IIS 5.0" under "Registry Hardening". It states to edit the
 >following registry keys or values:
 >
 >Topic: SYN Flood Attack Protection
 >Key: HKLM\System\CurrentControlsSet\Services\TCPIP\Parameters
 >Value: Value type
 >Problem: No such value - should I add it?
 >
 >Topic: Disable Internet Printing
 >Key: HKLM\Software\Policies\Microsoft\Windows NT\Printers\DisableWebPrinting
 >Value: DisableWebPrinting
 >Problem: There is no Windows NT key. There is a Windows key, but no Printer
 >key under it??
 >
 >Removing Administrative Shares
 >Key: HKLM\system\CurrentControlSet\Services\lanmanserver\parameters
 >Value: AutoShareServer
 >Problem: No such value. Should it be added? Instructions say to edit
 >it....??
 >
 >W2K SP4, IIS 5.0.
 >
 >Thanks for any clearification.
 >
 >Doug
 >
 >
 ><!-- ~MESSAGE_AFTER~ -->

 >> Stay informed about: Recommended Registry Hardening - registry keys are not pre.. 
Back to top
Login to vote
kgafvert

External


Since: Aug 23, 2003
Posts: 2972



(Msg. 3) Posted: Wed Dec 15, 2004 10:35 am
Post subject: Re: Recommended Registry Hardening - registry keys are not present? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Hello,

Problem 1: Yes, add the value. It's a DWORD.

Problem 2: Add the keys "Windows NT" and Printers, and then add the value
DisableWebPrinting.

Problem 3: Add the value.

--
Regards,
Kristofer Gafvert
<a style='text-decoration: underline;' href="http://www.ilopia.com" target="_blank">http://www.ilopia.com</a>


"DougMunday" <DougMunday.TakeThisOut@discussions.microsoft.com> wrote in message
news:1B0A87DB-3515-4AD9-BEDE-27EDDE5DCB6A@microsoft.com...
 >I am trying to follow the steps in Microsoft's "From Blueprint to Fortress:
 >A
 > Guide to securing IIS 5.0" under "Registry Hardening". It states to edit
 > the
 > following registry keys or values:
 >
 > Topic: SYN Flood Attack Protection
 > Key: HKLM\System\CurrentControlsSet\Services\TCPIP\Parameters
 > Value: Value type
 > Problem: No such value - should I add it?
 >
 > Topic: Disable Internet Printing
 > Key: HKLM\Software\Policies\Microsoft\Windows
 > NT\Printers\DisableWebPrinting
 > Value: DisableWebPrinting
 > Problem: There is no Windows NT key. There is a Windows key, but no
 > Printer
 > key under it??
 >
 > Removing Administrative Shares
 > Key: HKLM\system\CurrentControlSet\Services\lanmanserver\parameters
 > Value: AutoShareServer
 > Problem: No such value. Should it be added? Instructions say to edit
 > it....??
 >
 > W2K SP4, IIS 5.0.
 >
 > Thanks for any clearification.
 >
 > Doug
 >
 >
 >
 ><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Recommended Registry Hardening - registry keys are not pre.. 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
ActiveX.dll Registry - We've a problem with our intranet site, for which we developed an activex.dll which connects to a sql server database. The connectstring is stored in the registry of the server. This server is an win2000 server running iis. This dll contains some..

CLSID in registry deleted - Hello, By mistake, I deleted in the registry hkey_classes_roo/CLSID in stead of just 1 element (virus) withing CLSID. (windows XP) Result : logged on : the screen remains blank. I still can start a lot of programs like the registry, explorer, .... ....

COM/IUSR_/Registry and Security - Thanks in advance for any help. Our web application is typical. A little HTML and ASP with the business logic in a COM object. Until recently the COM object was installed in an MTS package. For reasons beyond the scope of this dissertation we..

IIS 5.1 on XP - Error accessing the OLE registry - Hi, I am using windows XP Corp Edition with IIS 5.1 as a dev server. Dev server websites will work fine sometimes, and other times I receive the error below. ----------------------------------- Error Type: error '8002801c' Error accessing the OLE..

Get Website number registry - Hy, How can i get the websitenumber of a website in the registry? thanks, Peter
   Web Hosting and Web Master Forums (Home) -> IIS All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]