Now why would you want to do that, one may ask given that Windows (and hence IIS) as well as SQL Server are proprietary products. There are a few reasons for this. First off, on Windows Server ...

In the test environment (2 IIS web servers, 1 SQL server, 1 IIS Utility server) none of our DB-driven apps are working. We cannot figure out the issue, but we think that MDAC is hosed.

Microsoft’s UrlScan 3.0 is an improved security filter for Internet Information Services Web server designed to prevent SQL-injection attacks.

Microsoft’s UrlScan 3.0 is an improved security filter for Internet Information Services Web server designed to prevent SQL-injection attacks.

A free download, the Web Application Configuration Analyzer scans IIS servers, hosted applications, and SQL Server instances for common security issues and misconfigurations.