Remove X-Powered-By: ASP.NET HTTP Response Header

Quite a few people have asked how to remove the default HTTP Response Headers of IIS6 and IIS7. It’s very easy, actually. You can have some fun with it too (bottom).

Remove, Edit or Add HTTP Response Headers in Windows 2003 IIS6

1. Open the IIS Management Console.
2. Right-click on “Websites” and select “Properties.”
3. Click on the “HTTP Headers” tab.
4. Highlight the “X-Powered-By: ASP.NET” entry and select “Remove.”
5. Also note that you can do this for all websites as above, or for an individual website by selecting it’s properties. Useful if you have sites powered by ASP and PHP on the same server.

 

Remove, Edit or Add HTTP Response Headers in Windows 2008 IIS7

1. Open the IIS Management Console.
2. Click on the Server Name in the left-hand pane.
3. Under the “IIS” heading in the right-hand pane, double-click on “HTTP Response Headers.”
4. Right-click on “X-Powered-By” and select Edit or Remove.
5. Also note that you can do this for all websites as above, or for an individual website by selecting it’s properties. Useful if you have sites powered by ASP and PHP on the same server.

 

Power your IIS6 or IIS7 Website with Pure Evil

You can also have some fun with the “X-Powered By” response header as its purpose is informational. You can also add your own custom header.

Related posts:

1. Host Headers vs. Spam and How-to Setup on IIS6 and IIS7
2. How to View Email Headers in Common Email Programs
3. Performance Tips: Disable Logging on Windows Server / IIS
4. Migrating websites from IIS6 to IIS7
5. TCP / IP Filtering For Windows

No Comments |  Print This Post |