From: Steven M. Bellovin [mailto:smb@research.att.com] Sent: Wednesday, August 01, 2001 8:16 PM

...

Are you taking into account that every copy of Win2K comes with IIS? I had to quickly run around and do upgrades yesterday. I clean forgot about the workstations. I bet that I'm not the only one either.

Are you sure about that? Or rather, are you sure it's on by default?

No, it's not on by default. But, no one that I know (including my duaghter's warez friends) whom is running Win2K at home, isn't running a web server. Even when they're not supposed to (behind cable modems). In the shop, we all run IIS, on the workstations, for local testing and development. But, what do you expect from a shop full of development geeks?

I just checked my toy desktop machine and rebooted to the other partition of my laptop, and didn't see it running on either.l To be sure, I'd have turned it off if I knew it was on, but I have no idea how to do things like that on Windows...

It is altogether too easy. Goto: Control Panel >> Administrative Tools >> Internet services manager.