Also, since IIS doesn't play well with the included .htaccess files, you might want to check with your host for alternative security protections.