IIS should not be installed by default on Windows Server installations. It is sufficiently complex that it needs a lot of configuration. Either that, or it should be completely locked down with absolutely no permissions at all.
I take back a lot of things I have said and thought about you. My apologies. You make many cogent points on this thread (after the first one).
It doesn't feel good to admit one may have been an ass. :)