I'd harden it first before installing any outward facing applications.
Change administrator account password to something secure. Implement a security policy. Create a new account with limited permissions to run your applications. Make sure your firewall is setup and configured.
I assume you'll be using IIS, so download Web Platform Installer and that'll be the easiest way to install both PHP and MySQL in one fell swoop.
Install something like wamp or xampp and get a "production" php.ini settings file, run the mysql secure script and you'd be fine
Or as said above, activate iis and install php and mysql using webinstaller. However you might run into problems with certain web apps due to iis if you have an application made for apache. The only reason I see for using iis is aspx applications and static html sites.
Why you choose windows server 2008 when you want to use PHP and MYSQL.
You should better select a Linux (CentOS) server with cPanel. cPanel would cost you $25-30 extra, but that would make server management easy for you.
█ YagHost - Pure SSD Hosting | Since 2007 | Average Response Time: 15 min
█ Web Hosting | Reseller Hosting | Managed VPS Hosting
█ 99.9% Server Uptime Guarantee | 24/7 Rapid Response Tech Support | 30 Day Money Back Guarantee
█ LopHost.com - Web Hosting Tutorials
If you need to learn, do a bit of digging on the web. All these questions have been answered there before.
AYKsolutions.com - High Bandwidth Specialists - 100TB/1Gbps/10Gbps Unmetered/CDN/DDOS Protected Over 20 Global Locations - Asia, Mexico, Brazil, Australia, US, CA, EU - Bare Metal and Virtual Cloud. All Managed. View our current Specials. We are Professional. Painless. Polite.
This place is a great source for help and learning but you definitely should go with a Managed Server or hire a sysadmin for this and teach yourself on a Project server, unless this server isn't important, especially on a Windows server. Just a suggestion since lots of people "try" utilizing an Unmanaged Server when they have no experience and then they get burned by their provider since the provider only will support so much.
Also I just went through a mock purchase, they have management options clearly labeled during the check-out process so I'm not sure where the confusion was.
David Byrne | Dedispec, LLC. Low Priced DDoS Protected Dedicated Servers | Cloud Hosting | Colocation | West Virginia & Kansas City www.dedispec.com - [email protected]