The rule with IIS6 on Windows Server 2003 is that everything is off unless you turn it on. If you want to loosen things up, cautions Security Supersite Editor Larry Seltzer, it's your responsibility.

Read more