I found the following statement in IIS Security Checklist
Virtual directores are NEVER used across servers.
How could that be? I mean IIS installs virtual directory C:\Inetpub\wwwroot on the server by default.
How can a server host a website if all the website files, sripts are residents outside of virtual directory?
I even tried to delete C:\Inetpub\wwwroot after IIS installation. It wouldn't let me delete it.
Can someone explain? Thx.