Remove X-Powered-By: ASP.NET Header
October 21, 2008
Have you ever noticed that IIS tends to brand every HTTP response with the header X-Powered-By: ASP.NET - it will do this even if your site is not powered by ASP.NET!
Here's how to remove this header on IIS 6:
- Open up the IIS Management Console
- Right Click on a Web Sites and select Properties
- Click on the HTTP Headers Tab
- Under Custom HTTP Headers click on
X-Powered-By: ASP.NETand click Remove

Here's how to remove it on IIS 7 / 7.5:
- Open Server Manager and select the server name under Internet Information Services (IIS) Manager
- Double click HTTP Response Headers
- Remove the
X-Powered-Byheader if it exists

Thanks go to Nick Gleason for sending instructions and providing a screenshot for IIS 7
Tweet
Related Entries
- Request Filtering in IIS 7 Howto - February 16, 2010
- IIS: Disabling Weak SSL Protocols and Ciphers - October 8, 2009
- Howto Disable the Server Header in IIS - December 6, 2005
- Apache mod_rewrite for IIS - March 24, 2005
- Batch Files to Restart Services on Windows - October 10, 2002
Trackbacks
Trackback Address: 722/A50AF7C69C92E7302402DBBFDCDDA144
Comments
On 12/21/2010 at 12:16:13 PM EST Jake Munson wrote:
1
Just a minor nitpick...in your directions above there should be a step in between 2 and 3 that says: "Click on Properties"
On 08/16/2011 at 1:00:22 PM EDT Pete Freitag wrote:
2
@Jake - thanks, updated.
Post a Comment
Recent Entries
- Nginx redirect www to non www domain
- HashDOS and ColdFusion
- HackMyCF Updated for APSB11-29 Security Hotfix
- Adobe eSeminar on FuseGuard
- Determining Which Cumulative Hotfixes are Installed on ColdFusion
- Adding Two Factor Authentication to ColdFusion Administrator
- ColdFusion Developer Week at Adobe.com
- Bug Loading Scripts for CFFileUpload and CFMediaPlayer


add to del.icio.us


