Hmm maybe.

But if it was off by default, I definatly know it's a large security risk to enable it.
Actually somewhere in the IIS help file it actually dead out says it, not in these exact words but similar. "for more security, IIS is not installed and enabled by default when installing windows 2003"
I must confess and make it clear though, this was at work. I would NEVER use IIS at home, unless it was some kind of test server, but not production. Windows is fine and all as a web server, as long as you use apache.
Archived topic from Iceteks, old topic ID:3543, old post ID:28831