IIS Security Audit helps you check your webserver for common vulnerabilities. Unlike other security tools, it checks the configuration of your operating system and webserver to find the most common vulnerabilities that hackers use to exploit websites running Windows 2000 Server and Internet Information Services (IIS). This program checks for vulnerabilities in RDS, ODBC Shell Access, Internet Printing, and IIS App Mappings. In addition, the program warns you to remove certain DOS commands (the ones hackers like).
Note: The unregistered version will check for some but not all of the vulnerabilities it is capable of finding.