Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

if I am setting up a seperate domain name to handle all static file serving, is there anything special I need to do in IIS7 so it doesn't serve cookies etc?

share|improve this question
What exactly are you trying to achieve? Knowing it could help providing more helpful answers :-) – Massimo Sep 2 '09 at 20:20
up vote 2 down vote accepted

IIS doesn't serve anything on its own, it only serves pages requested by clients and/or does things if some server-side application requests it to do them.

If you disable scripting and execution support in your web site, ony static file types will be served (HTML, images, etc.).

Of course, even a static HTML page can do whatever it wants on the client (including setting cookies)... but you can't tell IIS something like "only serve HTML pages that don't contain any client side scripting".

share|improve this answer
how about turning off modules? – user2659 Sep 2 '09 at 19:23
I'm talking about client-side scripting. There's no way to turn that off: if you put a script in a HTML page, it will get executed (unless the client browser disables scripting itself, of course). – Massimo Sep 2 '09 at 20:20

In IIS manager, under session state you have the option to modify the way IIS handle cookies. I did not make test yet.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.