Restoring IRM Files

Added:  7/9/2001
Article ID#:  KI0015

RDP customers have reported cases of Internet "hacking" into IRM sites.  When external forces have made unwarranted changes to an IRM site, use the following steps for restoring the system back to its original state.

1. Delete all instances of the following files:
   Default.asp
   Default.htm
   Index.asp
   Index.htm
   
   From the following folders:
   C:\
   C:\INetPub
   All subfolders under Inetpub
   
   
2. Delete the C:\Inetpub\Scripts folder entirely.
3. Uninstall the FTP server and NNTP server.
4. Change the Security on the Everyone group on the InetPub folder to "Read" and "List Folder Contents" only.
   If the security options described above are not available at the Inetpub folder level, make the changes on the root folder.
   
5. Change the Security on the Everyone group on the InetPub\MailRoot folder to "List Folder Contents" and "Write" only.
   If the security options described above are not available at the Inetpub folder level, make the changes on the root folder.
   
6. Confirm that a backup exists for customized pages, i.e. - UserText, UserHTML, Images, Caption.
7. Run the IRM Setup program.
8. Download and install the following Windows 2000/NT security patch:
   
   http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS01-033.asp
   
9. Go to the following Microsoft site and select the option for "Product Updates".  Download any "Critical Updates".
   
   http://windowsupdate.microsoft.com/

• RDP recommends backing up all custom IRM pages.