COMMAND

    IIS

SYSTEMS AFFECTED

    Win NT running IIS

PROBLEM

    Nick_Klein  found  following.   For  those  who  use IIS to manage
    multiple virtual Intranet sites,  check the accounts IIS  installs
    to log activity to these sites  as it seems that the passwords  to
    these accounts are "password".

    IIS  will  generate  a  random  password  for the first account it
    creates  itself,  but  it  seems  that  other  accounts  are  just
    "password".   Running  ISS  will  also  produce  some  interesting
    results for the other Microsoft accounts, like SMS and SQL -  give
    it a go.

SOLUTION

    Setting appropriate passsword will do it.