Best practice for systems running IIS, part of Hardening IIS:
Verify that the following is set in the machine.config
<system.web> <deployment retail="true" /> </system.web> |
Manual verification
%systemroot%\system32\inetsrv\appcmd list config -section:system.web/deployment /text:retail |
Nessus audit file check
<custom_item> type : AUDIT_IIS_APPCMD description: "IIS800051:Set Deployment Method to Retail:IIS8" value_type : POLICY_TEXT appcmd_args: "list config -section:system.web/deployment /text:retail" value_data : 'true' </custom_item> |