Skip to content
English
  • There are no suggestions because the search field is empty.

Recommended configuration for IIS and Win2K servers to support FCFL

Recommended configuration for IIS and Win2K servers to support FCFL

At the most basic, you should start with:

  • Disable unnecessary services

  • Follow the several product security guidelines for Win2K, IIS, ASP, and ASP.NET found here:
    http://www.microsoft.com/technet/security/prodtech/iis/default.mspx (scroll down a little to the Set Up, Configure, and Administer section)

  • Specifically, check out the IIS 5.0 secure installation guide:
    http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/iis/tips/iis5chk.mspx

  • Also, specifically, check out the IIS 5.0 “From Blueprint to Fortress: A Guide to Securing IIS 5.0” guide

  • This is part of the checklists above, but if you do nothing else, please:

  • Run the IIS Lockdown Wizard

  • Install the UrlScan secure URL filter

  • Set permissions appropriately on your hard drive to remove the default Win2K unsecure settings (i.e. Everyone: Full Control). Be careful as this can break most web apps. You should enable auditing (Object Access: Failure auditing) and monitor the security event log as your app runs to look for any permissions being denied to it by

This article offers some registry tweaks for web server performance of dynamic pages:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/optimize/perftune.mspx

You can often stop unused system services to reduce memory and CPU usage. Many win2k services are enabled by default that can be stopped (FTP, SMTP, WINS, and Directory Replicator.) You can always restart them if you run into issues. Here is a little how to for managing services:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/optimize/c03w2kad.mspx

http://web.ukonline.co.uk/cook/Services.htm

A free eBook for win2k performance tuning from those very smart people at Winternals:
http://www.windowsitlibrary.com/ebooks/WindowsPerformanceTuning/Index.cfm

Others:
Memory tuning - don’t run a lot of unnecessary applications/services. Make sure there is a decent amount of free memory.

Ensure that the file system is NTFS and not FAT32 and has been somewhat de-fragmented.

Set the performance boost for the foreground applications to "None".
This ensures that background applications (SQL Server, for example) will get higher priority than foreground applications.
To set the performance boost for the foreground applications to "None", you can do the following:

  1. Double-click the Control Panel System applet and select the Performance tab.
  2. On the Application Performance box drag the arrow to set the boost to "None".

There is a lot more but this is a topic that could and does fill volumes:
http://a9.com/windows%202000%20performance%20optimization