Skip Navigation

IIST-SV-000125: Disable WebDAV

The IIS 10.0 web server must have Web Distributed Authoring and Versioning (WebDAV) disabled.
To check compliance with IIST-SV-000125, complete the following steps:
  1. Open the IIS 10.0 Manager.
  2. Click the IIS 10.0 web server name.
  3. Click the
    Logging
    icon.
  4. In the
    Cells
    section, review the list of features.
If the
WebDAV Authoring Rules
icon exists, your server is not compliant.
If your server is not compliant, complete the following steps:
  1. Access Server Manager on the IIS 10.0 web server.
  2. Click the IIS 10.0 web server name.
  3. Click
    Manage
    .
  4. Click
    Add Roles and Features
    .
  5. On the
    Before you begin
    dialog, click
    Next
    .
  6. On the
    Installation Type
    dialog, click
    Role-based or feature-based installation
    .
  7. Click
    Next
    .
  8. On the
    Server Selection
    dialog, click the IIS 10.0 web server.
  9. From the
    Windows Features
    dialog, navigate to
    World Wide Web Services
    >
    Common HTTP Features
    .
  10. Deselect
    WebDAV Publishing
    .
  11. Click
    Next
    to remove the WebDAV Publishing feature from the IIS 10.0 web server.