MSADC and Scripts Virtual Directories on IIS

Issue

This check determines whether the MSADC (sample data access scripts) and Scripts virtual directories are installed on a scanned computer running Internet Information Services (IIS). These directories typically contain scripts that, if not required, should be removed to help reduce the attack surface of the computer.

Solution

We recommend that you remove these virtual directories if they are not required on the computer running IIS.

Note

• All versions of Microsoft Project Server (Project Central, Project Server 2002 and Project Server 2003) require the MSADC virtual directory. Project Server setup will create the MSADC virtual directory if not already created and will set minimum permissions required for Project Server functionality. Additional information is available in KB article 316398.

Instructions

To remove these virtual directories in Microsoft® Windows® XP Professional

1. Click Start, point to Control Panel, point to Administrative Tools, and then click Internet Information Services.
2. In the Internet Information Services Manager, right-click the virtual directories to remove, and then click Delete.

To remove these virtual directories in Windows 2000

1. Click Start, point to Programs, point to Administrative Tools, and then click Internet Services Manager.
2. In the Internet Information Services Manager, right-click the virtual directories to remove, and then click Delete.

To remove these virtual directories in Windows NT®

1. Click Start, point to Programs, point to Windows NT 4.0 Option Pack, point to Microsoft Internet Information Server, and then click Internet Service Manager.
2. In the Internet Information Services Manager, right-click the virtual directories to remove, and then click Delete.

Additional Resources

IIS Lockdown Tool

©2002-2004 Microsoft Corporation. All rights reserved.