IIS Lockdown Tool tip

From recent experience...

Use extreme caution when using the Undo feature of the IIS Lockdown Tool. The lockdown tool provides a very simple wizard for securing a machine running IIS, and it's great for getting a machine locked down quickly. But note what the help file has to say about the Undo feature:

The Undo operation restores the system settings that were in effect immediately before running the IIS Lockdown Tool. If you run the tool, then make additional configuration changes, then run the tool again and choose to undo, the effect could be to undo some of the configuration changes you made after running the tool. Therefore, it is important to test the system promptly and, if an undo is required, perform it immediately. [emphasis mine]

Bottom line is that if you have made any manual changes (adding new vroots, etc.) to your IIS setup since running the IIS lockdown tool, you should avoid using the Undo feature. Otherwise, you will need to manually restore all configuration changes made since the lockdown tool was run.

Also, unlike me, you should probably read the dialog (shown below) before clicking any buttons. :-)