WG220 IIS6 - Access to web administration tools must be restricted to the Web Manager and the Web Manager's designees.

Information

The key web service administrative and configuration tools must only be accessible by the web server staff. All users granted this authority will be documented and approved by the ISSO. Access to the IIS Manager will be limited to authorized users and administrators.

Solution

Restrict access to the web administration tool to only the Web Manager and the Web Manager's designees.

See Also

http://iasecontent.disa.mil/stigs/zip/July2015/U_IIS_6-0_V6R16_STIG.zip

Item Details

References: CAT|II, Rule-ID|SV-38326r2_rule, STIG-ID|WG220_IIS6, Vuln-ID|V-2248

Plugin: Windows

Control ID: 1f28bcb23f00e1aa1133bd3473c0583644eb365144aba3263105092c0af73756