Microsoft Security: IIS Lockdown Tool

Microsoft Security: IIS Lockdown Tool

After installing this,

Need to fix 2 things
aspnet_regiis -i once again

edit urlscan config at %WINDIR%\System32\Inetsrv\URLscan

add DEBUG inside [AllowVerbs]

remove DEBUG from [DenyVerbs]