I've developed using Win2K Advanced Server with IIS, SQL Server 2000, and Visual Studio.NET on a P2-300 with 256 MB of RAM, and it's doable (not great, but doable, much more so than many seem to ...

no problems at all installing SQL Server 2000 on XP Pro. The problem i had was that IIS didn't work properly, -it didn't run asp scripts so i had to reformat and reinstall, then it worked.

A free download, the Web Application Configuration Analyzer scans IIS servers, hosted applications, and SQL Server instances for common security issues and misconfigurations.

IISpy ignores all other HTTP requests sent to the compromised IIS server by its legitimate visitors – of course, these are still handled by the benign server modules. Figure 1.

Learn how to use IIS encryption features to protect your sensitive data in transit and at rest with SSL or TLS, SQL Server, BitLocker, EFS, and IIS Crypto.

I run both IIS and Apache Web servers in my honeynet. The Apache Web server gets attacked significantly more than the IIS server does. Also, most reported hacks are against Apache Web servers.