Address reviewer feedback even though introduction is redundant given module landing page

Orin-Thomas · Orin-Thomas · commit 343d31878e37 · 2026-04-01T07:36:37.000+11:00
diff --git a/learn-pr/advocates/secure-harden-internet-information-services/1-introduction.yml b/learn-pr/advocates/secure-harden-internet-information-services/1-introduction.yml
@@ -0,0 +1,13 @@
+### YamlMime:ModuleUnit
+uid: learn.devrel.secure-harden-internet-information-services.introduction
+title: Introduction
+metadata:
+  title: Introduction
+  description: Introduction to securing and hardening Internet Information Services (IIS) on Windows Server.
+  ms.date: 03/31/2026
+  author: Orin-Thomas
+  ms.author: orthomas
+  ms.topic: unit
+durationInMinutes: 2
+content: |
+  [!include[](includes/1-introduction.md)]
diff --git a/learn-pr/advocates/secure-harden-internet-information-services/2-authenticate-authorize.yml b/learn-pr/advocates/secure-harden-internet-information-services/2-authenticate-authorize.yml
@@ -10,4 +10,4 @@ metadata:
   ms.topic: unit
 durationInMinutes: 20
 content: |
-  [!include[](includes/1-authenticate-authorize.md)]
+  [!include[](includes/2-authenticate-authorize.md)]
diff --git a/learn-pr/advocates/secure-harden-internet-information-services/3-server-website-harden.yml b/learn-pr/advocates/secure-harden-internet-information-services/3-server-website-harden.yml
@@ -10,4 +10,4 @@ metadata:
   ms.topic: unit
 durationInMinutes: 18
 content: |
-  [!include[](includes/2-server-website-harden.md)]
+  [!include[](includes/3-server-website-harden.md)]
diff --git a/learn-pr/advocates/secure-harden-internet-information-services/4-certificate-configuration.yml b/learn-pr/advocates/secure-harden-internet-information-services/4-certificate-configuration.yml
@@ -1,5 +1,5 @@
 ### YamlMime:ModuleUnit
-uid: learn.devrel.secure-harden-internet-information-services.certificate-config
+uid: learn.devrel.secure-harden-internet-information-services.certificate-configuration
 title: HTTPS and TLS configuration
 metadata:
   title: HTTPS and TLS Configuration
@@ -10,4 +10,4 @@ metadata:
   ms.topic: unit
 durationInMinutes: 24
 content: |
-  [!include[](includes/3-certificate-config.md)]
+  [!include[](includes/4-certificate-configuration.md)]
diff --git a/learn-pr/advocates/secure-harden-internet-information-services/5-knowledge-check.yml b/learn-pr/advocates/secure-harden-internet-information-services/5-knowledge-check.yml
@@ -10,7 +10,7 @@ metadata:
   ms.topic: unit
 durationInMinutes: 6
 quiz:
-  title: Knowledge check
+  title: Check your knowledge
   questions:
   - content: "Your organization has an intranet web application hosted on IIS that should be accessible only to domain-joined users using their Windows credentials, with no credential prompt appearing. Which IIS authentication method should you configure?"
     choices:
diff --git a/learn-pr/advocates/secure-harden-internet-information-services/6-summary.yml b/learn-pr/advocates/secure-harden-internet-information-services/6-summary.yml
@@ -10,4 +10,4 @@ metadata:
   ms.topic: unit
 durationInMinutes: 1
 content: |
-  [!include[](includes/5-summary.md)]
+  [!include[](includes/6-summary.md)]
diff --git a/learn-pr/advocates/secure-harden-internet-information-services/includes/1-introduction.md b/learn-pr/advocates/secure-harden-internet-information-services/includes/1-introduction.md
@@ -0,0 +1,3 @@
+Internet Information Services (IIS) is one of the most widely deployed web server platforms in enterprise environments. While IIS provides a robust foundation for hosting web applications, its default configuration prioritizes functionality over security. Without deliberate hardening, an IIS server can expose unnecessary features, accept weak encryption protocols, and leave authentication settings that don't match the requirements of your environment. As an administrator, it's your responsibility to close these gaps by configuring IIS to meet the security standards your organization requires.
+
+This module walks you through the key areas of securing and hardening IIS on Windows Server. You learn how to configure authentication and authorization to control who can access your sites and applications, harden server and website settings by removing unused features and reducing attack surface, and set up HTTPS with properly configured TLS certificates and strong cipher suites. By the end of this module, you're able to apply these practices to help protect your IIS deployments against common threats.
diff --git a/learn-pr/advocates/secure-harden-internet-information-services/includes/2-authenticate-authorize.md b/learn-pr/advocates/secure-harden-internet-information-services/includes/2-authenticate-authorize.md
diff --git a/learn-pr/advocates/secure-harden-internet-information-services/includes/3-server-website-harden.md b/learn-pr/advocates/secure-harden-internet-information-services/includes/3-server-website-harden.md
@@ -13,7 +13,7 @@ To review installed IIS role services, perform the following steps:
 
 The table lists roles that may not be necessary on your web server deployment.
 
-| **Role Service** | **When to Remove** |
+| **Role Service** | **When to remove** |
 |---|---|
 | WebDAV Publishing | Remove unless applications explicitly require WebDAV. |
 | FTP Server | Remove if no FTP sites are hosted. |
diff --git a/learn-pr/advocates/secure-harden-internet-information-services/includes/4-certificate-configuration.md b/learn-pr/advocates/secure-harden-internet-information-services/includes/4-certificate-configuration.md
@@ -2,7 +2,7 @@ Unencrypted HTTP communication can be intercepted, read, or modified by anyone o
 
 The following table lists common certificate types:
 
-| **Type** | **Description** | **Use Case** |
+| **Type** | **Description** | **Use case** |
 |---|---|---|
 | Domain Validation (DV) | Verifies domain ownership only | General-purpose public websites |
 | Organization Validation (OV) | Verifies domain and organization identity | Business websites |
diff --git a/learn-pr/advocates/secure-harden-internet-information-services/includes/6-summary.md b/learn-pr/advocates/secure-harden-internet-information-services/includes/6-summary.md
diff --git a/learn-pr/advocates/secure-harden-internet-information-services/index.yml b/learn-pr/advocates/secure-harden-internet-information-services/index.yml
@@ -29,9 +29,10 @@ roles:
 products:
 - windows-server
 units:
+- learn.devrel.secure-harden-internet-information-services.introduction
 - learn.devrel.secure-harden-internet-information-services.authenticate-authorize
 - learn.devrel.secure-harden-internet-information-services.server-website-harden
-- learn.devrel.secure-harden-internet-information-services.certificate-config
+- learn.devrel.secure-harden-internet-information-services.certificate-configuration
 - learn.devrel.secure-harden-internet-information-services.knowledge-check
 - learn.devrel.secure-harden-internet-information-services.summary
 badge:

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	+Internet Information Services (IIS) is one of the most widely deployed web server platforms in enterprise environments. While IIS provides a robust foundation for hosting web applications, its default configuration prioritizes functionality over security. Without deliberate hardening, an IIS server can expose unnecessary features, accept weak encryption protocols, and leave authentication settings that don't match the requirements of your environment. As an administrator, it's your responsibility to close these gaps by configuring IIS to meet the security standards your organization requires.
	`2`	`+`
	`3`	+This module walks you through the key areas of securing and hardening IIS on Windows Server. You learn how to configure authentication and authorization to control who can access your sites and applications, harden server and website settings by removing unused features and reducing attack surface, and set up HTTPS with properly configured TLS certificates and strong cipher suites. By the end of this module, you're able to apply these practices to help protect your IIS deployments against common threats.