Skip to content

IIS 10: Remove server response header

In this post, you will learn to remove the server: Microsoft-IIS/10.0 response header. By removing unnecessary headers from the response we can reduce the quantity of data transmitted from the web server back to the server. and It makes it a bit harder for attackers to determine the software that is powering the web server.

You can see the server header in the following image

Let’s use Set-WebConfigurationProperty to disable the server response header from the IIS. Open your PowerShell and run the following command.

    Set-WebConfigurationProperty -pspath 'MACHINE/WEBROOT/APPHOST' -filter "system.webServer/security/requestFiltering" -name "removeServerHeader" -value "True"

    After running the above command your response header should be similar to below without the server header.

    0 0 votes
    Article Rating
    Subscribe
    Notify of
    guest

    2 Comments
    Most Voted
    Newest Oldest
    Inline Feedbacks
    View all comments