How Do I Disable Options on Web Server IIS?

Are you looking to disable certain options on your web server running IIS (Internet Information Services)? In this tutorial, we’ll explore different methods to accomplish this task and secure your server. Let’s dive in!

Method 1: Using IIS Manager

If you have access to the IIS Manager, follow these steps:

1. Open IIS Manager: Launch the IIS Manager from the Start menu or by typing “inetmgr” in the Run dialog (Win + R).
2. Select your server: Expand the tree view on the left and navigate to your server name.
3. Disable features: Double-click on “Features View” and locate the feature you want to disable.
4. Disable feature: Right-click on the feature and select “Remove” or “Disable” depending on your version of IIS.
5. Apply changes: Click on “Apply” in the Actions pane to save your changes.

This method allows you to easily disable specific features using the graphical interface of IIS Manager. However, if you prefer a command-line approach, read on!

Method 2: Using AppCmd.exe

If you prefer using command-line tools, AppCmd.exe is a powerful utility provided by IIS. Follow these steps:

1. Open Command Prompt: Launch Command Prompt by searching for it in the Start menu or using Win + R and typing “cmd”.
2. Navigate to AppCmd.exe: Change directory to where AppCmd.exe is located. Typically, it can be found at “C:\Windows\System32\inetsrv”.
3. Disable feature: Execute the following command to disable a specific feature:

   appcmd.exe set config /section:sectionName /-commit:apphost

   Replace “sectionName” with the name of the section you want to disable.

4. Apply changes: Once executed, the changes will automatically take effect.

The command-line method provides more flexibility and can be easily automated. Now, let’s look at another approach using web.config file modifications.

Method 3: Modifying web.config

If you want to disable options for a specific website or application, modifying the web.config file is an effective solution. Here’s how:

1. Locate the web.config file: Find and open the web.config file in the root directory of your website or application.
2. Add configuration settings: Within the <configuration> tag, add a new <system.webServer> section if it doesn’t exist already.
3. Add feature settings: Inside the <system.webServer> tag, add a <remove> tag for each feature you want to disable. For example:

   <system.webServer>
         <!-- Other configuration settings -->
         <remove name="WebDAVModule" />
         <remove name="DirectoryBrowsing" />
         </system.webServer>

   This example shows how to remove the WebDAV module and directory browsing feature.

4. Save changes: Save the web.config file, and the changes will be applied immediately.

This method gives you granular control over individual websites or applications. Remember to backup your web.config file before making any modifications.

Conclusion

In this tutorial, we explored three different methods to disable options on a web server running IIS. Whether you prefer using the graphical interface of IIS Manager, command-line tools like AppCmd.exe, or modifying the web.config file directly, you now have the knowledge to secure your server by disabling specific features. Choose the method that suits your needs and take control of your web server’s options!