IIS
Jump to navigation
Jump to search
Restart IIS
Click Start, click Run type IISReset, and then click OK.
HTTP Header
- To modify header is not only related to App
- Server name is not exposer “Microsoft-HTTPAPI/2.0”.
- Pre-auth was done in the test.
- The explanation is: If the response's Server header returns Microsoft-HttpApi/2.0, it means that the HTTP.sys is being called, not IIS.
- Navigate HKLM\SYSTEM\CurrentControlSet\Services\HTTP\Parameters\ If DisableServerHeader doesn't exist, create it (DWORD 32bit) and give it a value of 2. If it does exist, and the value isn't 2, set it to 2
- Who's that the answer is the ADFS.
- Registry entry has to be done on the ADFS.
- It will affect everything
- It is not IIS hence it does not have to be done on the WAP (reverse proxy)
- ADFS has to be updated on the registry.
- to whom response, it can be done.
Resources: https://blogs.msdn.microsoft.com/dsnotes/2017/12/18/wswcf-remove-server-header/