How to Disable the Server HTTP Header in Microsoft IIS March 10, 2025

For security reasons, it is recommended to disable HTTP headers to prevent IIS from sending the Server header in HTTP/S responses. Follow this guide to disable it.

Steps to Disable the Server Header:

1. Open IIS Manager.
2. Connect to the local server.
3. Select the Default Web Site.
   
4. Double-click Configuration Editor.
5. In the Section dropdown list, navigate to:
   webServer > security > requestFiltering
   
6. Locate removeServerHeader and set its value to True.
7. Click Apply in the Action panel at the top right corner.
   

This configuration will prevent IIS from revealing the Server header in HTTP responses, enhancing security.