Information
6. Restrict access to iisadmpwd Virtual Directory to Windows Authenticated users if it exist or remove the virtual directory mapping. Removing unnecessary files and folders will help to reduce attack surface thus mitigating unnecessary attack vectors.
Solution
Make sure 'iisadmpwd' does not exist or access is restricted to Windows Authenticated users.