Microsoft Windows NT 4.0 Guide Manual de usuario descargar pdf (Pagina 115)

Microsoft

Windows Server

™

2003 White Paper

Windows NT 4.0 Server Upgrade Guide 110

than 8,500 people—was put on hold while the company conducted intensive security training.

After the training was completed, the development teams analyzed the Windows code base,

including IIS 6.0, to implement the new learning. This training represents a substantial investment

to improve the security of the Windows platform. In addition, during the design phase of the

product, Microsoft conducted extensive threat modeling to ensure that the company’s software

developers understood the type of attacks that the server might face in customer deployments.

There are several key security features important to consider when developing a server

consolidation plan:

• New server security defaults. IIS 6.0 is not installed by default during installation or upgrade of

Windows Server 2003, which reduces the Web infrastructure attack surface. When administrators

choose to install IIS 6.0, it is configured to use maximum security settings by default.

• Default low-privilege account. All IIS 6.0 worker processes, by default, and all ASP built-in

functions, at all times, run as Network Service user accounts. This new, built-in account has

limited operating system privileges.

• Constrained delegated authentication. Domain administrators can limit the delegation of

authorization credentials to a limited set of network resources.

For more information, see IIS 6.0 Security Changes

in an earlier section.

Major Differences Among Versions of IIS

The following table lists significant differences across versions of IIS. The two key differences are:

• IIS 6.0 includes a kernel mode driver, HTTP.SYS, which receives the incoming requests to a Web

server.

• IIS 6.0 includes two modes of operation: IIS 5.0 isolation mode and process isolation mode, which

are discussed in the following sections.

IIS Version Differences

Area IIS 4.0 IIS 5.0 IIS 5.1 IIS 6.0

Operating System Windows NT

4.0

Window 2000 Windows XP

Professional

Windows

Server 2003

Family

Architecture 32 bit 32 bit 32 and 64 bit 32 and 64 bit

Application Process

Model

TCP/IP Kernel

Mtx.exe

TCP/IP Kernel

Dllhost.exe

(Multiple Dll

hosts in

medium or high

isolation)

TCP/IP Kernel

Dllhost.exe

(Multiple Dll

hosts in

medium or high

isolation)

HTTP.sys

Kernel

IIS 5.0

isolation:

Intetinfo.exe in

process or

Dllhost.exe out

of process

Worker

process

isolation:

1 2 ... 110 111 112 113 114 115 116 117 118 119 120 ... 154 155

Comentarios a estos manuales

Sin comentarios

Microsoft Windows NT 4.0 Guide Manual de usuario Pagina 115

Comentarios a estos manuales

Relacionado con productos y manuales para Servidores Microsoft Windows NT 4.0 Guide