title: In my configurations to setup IIS, SQL-Server, & ASP.NET below, are there unnecessary settings leading to security issues?
body: <p>I am learning ASP.NET MVC 3 from many sources on the internet. I am worrying whether my settings based on the mixed information contains unnecessary things leading to security risks.</p>
  
  <p>In this topic, I need your suggestion or comment pertaining to my settings explained below. I will assign a number to each step to make it easier to be referenced in your comment or suggestion.</p>
  
  <hr>
  
  <p><strong>STEP 1: Enabling IIS</strong></p>
  
  <p><img src="https://i.stack.imgur.com/21S6q.png" alt="alt text"></p>
  
  <hr>
  
  <p><strong>STEP 2: Installing .NET 4</strong></p>
  
  <p>No image :-)</p>
  
  <hr>
  
  <p><strong>STEP 3: Installing SQL-Server 2008R2</strong></p>
  
  <p>No image :-)</p>
  
  <hr>
  
  <p><strong>STEP 4: Installing Visual Studio 2010</strong></p>
  
  <p>No image :-)</p>
  
  <hr>
  
  <p><strong>STEP 5: Make a project, e.g., NerdDinner</strong></p>
  
  <p>I put my project file (including NerdDinner.mdb) under C:\ </p>
  
  <p>NerdDinner.mdb is already populated with dummy data.</p>
  
  <p><img src="https://i.stack.imgur.com/rAvHW.png" alt="alt text"></p>
  
  <hr>
  
  <p><strong>STEP 6: Configuring Global Application Pool</strong></p>
  
  <p><img src="https://i.stack.imgur.com/jbMPR.png" alt="alt text"></p>
  
  <hr>
  
  <p><strong>STEP 7: Make Virtual Directory using Visual Studio 2010</strong></p>
  
  <p><img src="https://i.stack.imgur.com/gJqu9.png" alt="alt text"></p>
  
  <p>Shown in IIS Manager, NerdDinner is an application under the default web site.</p>
  
  <p><img src="https://i.stack.imgur.com/QxiwA.png" alt="alt text"></p>
  
  <hr>
  
  <p><strong>STEP 8: Configuring Application Pool for NerdDinner web app</strong></p>
  
  <p><img src="https://i.stack.imgur.com/dWQ3L.png" alt="alt text"></p>
  
  <hr>
  
  <p><strong>STEP 9: Attaching and Configuring NerdDinner.mdb using Sql-Server Management Studio</strong></p>
  
  <p><img src="https://i.stack.imgur.com/qW9rj.png" alt="alt text"></p>
  
  <hr>
  
  <p><strong>STEP 10: Configuring Connection String</strong></p>
  
  <pre><code> &lt;add name="NerdDinnerEntities"   
  
    connectionString="metadata=res://*/Models.NerdDinner.csdl|res://*/Models.NerdDinner.ssdl|res://*/Models.NerdDinner.msl;provider=System.Data.SqlClient;provider connection string=&amp;quot;
       Data Source=.\sqlexpress;
       Initial Catalog=NerdDinner;
       Integrated Security=True;
       MultipleActiveResultSets=True
       &amp;quot;"
       providerName="System.Data.EntityClient" /&gt;
  </code></pre>
  
  <hr>
  
  <p><strong>Testing</strong> </p>
  
  <p>Everything works well, but I am not sure whether or not these steps contains security issues.</p>