Why don't move RS to web server? That way, you don't need IIS on sql server.