Disabling Detailed Error Responses in IIS
Detailed information about specific HTTP request errors is intended to help local administrators resolve errors as they occur. In certain cases, such information may identify the application, thus posing a security threat.
You can set up IIS to display detailed information only for local requests and have remote requests redirected to custom error pages.
To disable detailed error responses for remote requests in IIS Manager:
- Launch IIS Manager.
- Select your website in the treeview and double-click the Error Pages icon on the site home page.
- In the Actions pane, click Edit Feature Settings....
- In the Edit Error Pages Settings dialog box, select Detailed errors for local requests and custom error pages for remote requests.
- Click OK.
For more information, please see the Microsoft documentation.