How to hide the version of IIS on Windows Server 2012 R2

Question

Trying to hide the version of IIS on our Windows 2012R2 server until we can complete an upgrade. We've used the URL Rewrite module to create an outbound rule however it doesn't work when the server issues a 4xx/5xx errors, the actual version still shows. Is there a way to take care of this with a registry change or some other method? Thanks,

Answer 1

@Anthony DePinto

Do you want to hide the version of iis in response server header? if so, you can try this rule:

<rewrite>   
  <outboundRules rewriteBeforeCache="true">     
    <rule name="Remove Server header">       
      <match serverVariable="RESPONSE_Server" pattern=".+" />       
      <action type="Rewrite" value="" />     
    </rule>   
  </outboundRules> 
</rewrite>

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Set removeServerHeader to true.

Answer 3

https://halfblood.pro/everything-you-might-need-about-iis-server-header-58ca268547be

You might choose from option 1 and option 2, but since Windows Server 2012 R2 is too old to support option 3 you won't be able to get rid of the Server header in many cases.