# TIL: How to remove IIS server response header

1. Go to `Server Manager -> IIS`
    
    * Right click on the Server
        
    * Select `Internet Information Services (IIS) Manager`
        
        ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1699510973903/346ce59c-4a9c-4136-a543-953f5f7314bf.png align="left")
        
2. On `Features View` tab, go to `Management` -> `Configuration Editor`
    
3. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701095240162/39dfcc0c-d752-4c8e-b626-56a6aff1c93b.png align="center")
    
    On the drop down menu, select the section: `system.webServer` -> `security` -> `authentication` -> `requestFiltering`
    
    ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701095285697/64237a65-2ce0-49cc-83e5-2f853f420dc6.png align="center")
    
4. Set the value for `removeServerHeader` to `True`
    
5. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701095303071/bfd7cf85-7406-486d-a317-b73be783a927.png align="center")
    
    Reload the page and inspect the response. The IIS header should be removed.
    
    ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1701095309160/8912f783-a3ac-46fa-91e7-873ef097a627.png align="center")