Not going to hand out points on this one but want to point out a few things.
1. You have to have Admin privliages for this thing to work, granted there maybe a few not so secure IIS systems out...