OK, since this forum area hasn't had any postings in awhile.
I'm trying to find some MS technical documentation. Been googling all morning, no luck.
What I need: the MS KB or Technet article that 'splains/spells out that the passwords for the IWAM and IUSR accounts in IIS are set by the system by default during IIS install (and not typically managed/set by human beings). I know this is the case with IIS V6 not sure about V7.
I've found all sorts of stuff on how to hack the db where the pwds for these accounts are contained and or how to change them, but I can't find this particular statement. Its a well-known fact cited often, I just need an authoritative source to reference from Microsoft such as a KB or Technet article/tech reference and it seems surprisingly hard to find.
Anyone know of the KB or Technet article I'm referring to? If so, a link would be great.
Thanks,
Jim
James Adgate, CISSP IT Auditor and Compliance Specialist Data Loss Prevention (DLP) IT Security Policy and Risk Mitigation for Enterprises http://linkedin.com/in/jamesadgatech