501 not implemented, IIS 6 and TRACE verb

Tags: IIS

I was working on an issue and was getting a 501 not implemented error when trying to use the TRACE verb.  Here is a couple good links that discuss this further.

‘Registry entries that can be added.

 ‘Thread on this topic.

Microsoft’s recommendation is not to have this enabled on a production server.
“Do not leave EnableTraceMethod enabled on a production system, as it can reveal back-end server address information to a malicious user.”


Add a Comment