Technical instruction - IIS security

Owned by Shafi Miah
Last updated: 30 Aug 2024 by Mattias Löfstrand
1 min read

Review Microsoft’s latest policies and recommendations for Windows Servers, IIS, Azure and ohter components and infrastructure used for an installation.

Service account

It is recommended to use a service account for IIS instead of LocalSystem.

IIS settings

Default passwords

  • Check and change default password of web viewer and webadmin page of web viewer

  • Check and change default passwords of api endpoints

Other security aspects to consider

https://signifikant.atlassian.net/wiki/spaces/ASKB/pages/546963458/Technical+instruction+-+Installing+application+on+Windows+Server#Other-Apps-on-Server

https://signifikant.atlassian.net/wiki/spaces/ASKB/pages/546963458/Technical+instruction+-+Installing+application+on+Windows+Server#Security