How to Hide Server Information In Windows Server 2008

Posted on 2010-08-27
Last Modified: 2013-12-04

Anyone please explain me how to hide server information in WIndows Servers 2008

Any one knows please reply me.

Question by:activesoftware
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 33540167
What do you exactly want to do/hide ?
LVL 25

Accepted Solution

Tony Johncock earned 250 total points
ID: 33540275
Are you referring to the banner?

If so, the only way I've found is to use URLScan and follow the instructions in this article:

Expert Comment

ID: 33542622
If you want to restrict access to a hard drive so that other local users cannot access it has only below permission.

C Drive Root

Administrators - FULL
Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

LVL 25

Expert Comment

by:Tony Johncock
ID: 33542671
Actually it's considered good practice to move the IIS folder to another location/drive. It reduces the attack profile.
LVL 30

Assisted Solution

by:Brad Howe
Brad Howe earned 250 total points
ID: 33544163
Tony1044 is correct. URLScan can remove server info using the "RemoveServerHeader" feature. 
With that said, the HTTP header, the TCP/IP response can be determined on most apps (including IIS) so EVEN IF you took that header off, it would still be possible to enumernate.
For example telnet to port 80 on your server and then press control-C.
Hope it helps,

Author Closing Comment

ID: 33924471

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
Security measures require Windows be logged in using Standard User login (not Administrator).  Yet, sometimes an application has to be run “As Administrator” from a Standard User login.  This paper describes how to create a shortcut icon to launch a…
Along with being a a promotional video for my three-day Annielytics Dashboard Seminor, this Micro Tutorial is an intro to Google Analytics API data.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question