windows 2008 R2 IIS 安全该怎么做呢？有没有整套的方案？

[dbfox]

[geeklian]

1.打好补丁

2.下面2个工具帮你配置组策略：
[Microsoft Baseline Security Analyzer](http://www.microsoft.com/en-us/download/details.aspx?id=7558)
[Microsoft Security Compliance Manager](http://technet.microsoft.com/en-us/library/cc677002.aspx)

3.参考[NSA的2003的配置](https://www.nsa.gov/ia/mitigation_guidance/security_configuration_guides/operating_systems.shtml)