You do not set up multiple identities for a site, That will make all DNS CNAMES point to the default site, Each site must have its own identity.
What you have to do is create a new website in the IIS MMC for each site you host with the Home Directory for each one set as SWD suggests, then configure the host header for each site.
Something that I do for each site is to have the main folder for the site then a
as the root and a logs folder in the main folder (for the log files).
Like so:
MainIISFolder
|
|
SiteFolder ' repeated for every site
|---logs ' logs folder
|---www ' root folder
|
|----SiteFolders 'user created stuff
I also have all sites configured on a different drive in a separate folder so they are away from the default path of c:\inetpub etc (Anti-Virus\Hacking). this way the anon user has no access at all to any system drives or anything beyond this folder. Disable the default site and the Admin site then have a site with just a default page and no FP extensions with no host header and every kind of access to this folder secured up, leave anon access on of course. This will become the default site and will be the target of Nimda, Code Red and any other malware that attacks port 80, this way there is less risk of infiltration.
And always make sure you are fully up to date with SPs and Patches, be careful with the IIS Lockdown tool it can shut off all access if used incorrectly.
Chris.
Indifference will be the downfall of mankind, but who cares?