How to disable the Server HTTP header in Microsoft IIS - WKB202501

OBJECTIVE or GOAL

Prevent IIS from sending the Server header in HTTP/S responses.

ENVIRONMENT

• Windows Server 2019/2016
• Microsoft IIS 10.0+

PROCEDURE

1. Open IIS Manager.
2. Connect to the local server.
3. Select the Default Web Site.
4. Double-click the Configuration Editor.
5. In the Section list, select system.webServer > security > requestFiltering.
6. Set the value of "removeServerHeader" to True.
7. Click the Apply button.
8. For NuGenesis versions 9.1+: Repeat steps 4 through 7 for the two sites "AuditTrailClientApp" and "AuditTrailWebServer".
9. Restart the web server.

ADDITIONAL INFORMATION

See article 202467 for guidance on determining if the header is no longer present in the HTTP replies from the server.