Enabling SSL in IIS on Windows XP Professional
This article describes steps one may take to create a test certificate that allows one to enable SSL on IIS under Windows XP Professional.
IIS Lockdown Wizard
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/tools/locktool.asp
Software works by turning off unnecessary features thereby reducing attack surface available to attackers.
Manage Security of Your Windows IIS Web Services
Microsoft Consulting Services web server best practices.
Secure Internet Information Services 5 Checklist
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/chklist/iis5chk.as
Recommendations and best practices to secure a server on the Web running Microsoft Windows 2000 and Internet Information Services (IIS) 5.
Urlscan Security Tool
Urlscan is a powerful security tool that works in conjunction with the IIS Lockdown Tool to give IIS Web site administrators the ability to turn off unneeded features and restrict the kind of HTTP requests that the server will process.