Ensure IIS HTTP detailed errors are hidden from displaying remotely
A Web site's error pages are often set to display the detailed error information for troubleshooting purposes during testing or initial deployment. To prevent unauthorized users from viewing this privileged information, the detailed error pages must not be displayed for remote users.
Configure the following
- Access the IIS Manager with the Administrative privileges.
- Expand the server and the Sites folder in the Connections pane on the left side of the screen.
- Select the Web site or the application to be configured.
- Select Error Pages in the Features View.
- Select Open Feature in the Actions pane.
- Select Edit Feature Settings.
- In the Edit Error Pages Settings dialog, under Error Responses, select either Custom error pages or Detailed errors for local requests and custom error pages for remote requests.
- Click to exit the Edit Error Pages Settings section.