Ensure ‘deployment method retail’ is set

Best practice for systems running IIS, part of Hardening IIS:

Verify that the following is set in the machine.config

<system.web>
   <deployment retail="true" />
</system.web>

Manual verification

%systemroot%\system32\inetsrv\appcmd list config -section:system.web/deployment /text:retail

Nessus audit file check

<custom_item>
 type : AUDIT_IIS_APPCMD
 description: "IIS800051:Set Deployment Method to Retail:IIS8"
 value_type : POLICY_TEXT
 appcmd_args: "list config -section:system.web/deployment /text:retail"
 value_data : 'true'
</custom_item>

References