How secure is this?

[Lee]

Ok Win2000 SBS

I have created an IIS virtual folder say called \files that maps to a folder
on the server with company files in it so people can get at it remotely. I
have turned on the basic auth, and turned off anonymous.

Now I can use the map command with server ip such as \\xxx.xxx.xxx.xxx\files
and it will successfully map it.

The only port open on the router is 80, the VPN and Terminal Services port

How secure is this setup from a prople hacking the server perspective

Thanks

 

[GA]

There is a NG dedicated to security that might better answer your question.
I will just say, that if you run IIS, you might want to run the MS Baseline
Security Analyzer on the server - it will open your eyes.