Windows 2003 server protection ?

Hi Folks.
We have a small office and the boss wants to have his schedule and stuff viewable via internet because he's on the road alot.

There is a way to do this with the 2003 server and IIS, but my worry is that I am ignorant of the best way to protect the server from malicious visitors and such with IIS open at port 80; is there a best way to make it so that ONLY a couple of users can access it at all ?

That would be best because really no more than a couple of people will need to log into it.

I would very much appreciate any advice, education or pointers.

Thanks !

 

The safest way would be to setup a VPN and tunnel whatever application your boss wants access to through it. As far as opening the actual applications ports to internet is not advisable unless you really know what you are doing and application is locked down, but people do it all the time...