Hi guys,

I am getting a WIN2K3 server from The Planet, I dont want to use it full-fledged, Email primarily with mailenable and a little hosting 1 or 2 sites.

Any best practices, advises - Security related

thanks and regards

Here is a start:

http://www.microsoft.com/technet/security/prodtech/Win2003/W2003HG/SGCH00.mspx

Windows 2003 and IIS 6.0 is locked down by design. You may need to enable the extensions in IIS to serve dynamic pages.

Also, make sure that you have updated the OS with the latest patches and upgrades. Try and get yourself a software firewall - Visnetic from DeerField is a good option.

Alternatively, also download Microsoft Baseline Security Analyzer (MBSA) and scan your server with it. Fix the necessary areas.

Always apply the patches - fast!