If you get into the mind of potential hackers to your site, you soon realize that it would be a great benefit for them to know what operating system and web server you are running. With this information, they could exploit weaknesses in the web server, while providing little or no utility to legitimate users, is often the starting place for hackers and "script kiddies".

You can modify the IIS SMTP server welcome message on Windows Server 2003 or Windows 2000 to display a custom message by adding a ConnectResponse Metabase Property.  

Interested in a freeware URL Rewriter for IIS? Do you wish IIS had a mod_rewrite? IIRF is a small, cheap, easy to use, URL rewriting ISAPI filter that combines a good price (free!) with good features. It is reasonably fast, and reasonably powerful. You can get the source code to inspect it or modify it yourself if you desire. If you use IIS, you can download IIRF and get started right now.

IIS password protection of files and folders has always been dificult.  IISPassword brings the ease and power of Apache’s htaccess to Microsoft IIS. No longer is there a need for system user accounts and complex access permissions for maintaining a secure, password protected web site.

Protect webpages by userid/password. This easy to configure ISAPI filter for IIS servers does not use Windows userids but .htaccess-compatible userid/password files.