MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

26-22 Chapter 26 Implementing, Managing, and Troubleshooting Network Protocols and Services
Objective 6.4
Configure, Manage, and
Implement Internet Information
Services (IIS)
IIS is a robust, high-performance Web server included with Windows XP Professional.
It is based on the same software included with the Windows Server 2003 family, used
to host some of the largest sites on the Internet. The version of IIS included with Windows
XP Professional has been scaled down for home and small office use, however.
Understanding the features and limitations of this variety of IIS is critical for completing
this objective.
To understand IIS, you must have some understanding of the underlying protocols.
HTTP provides rich content to browsers, and is the only protocol most Internet and
intranet Web sites require. File Transfer Protocol (FTP) is often used for downloading
files, although HTTP is more common. Simple Mail Transfer Protocol (SMTP) is the
protocol used to transfer messages between post offices. IIS uses SMTP to send outgoing
mail—for example, to forward the results of a form to the site administrator.
Security is a critical aspect of every Web site. To protect IIS from attack, you should
restrict NTFS file permissions, configure authentication requirements, and restrict the
types of access available to users. You can configure each of these types of protection
separately for different virtual directories. Optimally, you would follow the security
principal of least privilege and grant only the minimal access required to each virtual
directory.