title: Disable HTTP OPTIONS, TRACE, HEAD, COPY and UNLOCK methods in IIS
body: <p>For security reasons I want to disable those methods through application level
  so I have this <code>web.config</code> file:</p>
  <pre class="lang-xml prettyprint-override"><code>&lt;configuration&gt;
      &lt;location path=&quot;index.php&quot;&gt;
      &lt;system.webServer&gt;
                  &lt;directoryBrowse enabled=&quot;false&quot; /&gt;
      &lt;/system.webServer&gt;
  
      &lt;system.web&gt;
          &lt;authorization&gt;
              &lt;deny verbs=&quot;OPTIONS&quot; users=&quot;*&quot; /&gt;
              &lt;deny verbs=&quot;TRACE&quot; users=&quot;*&quot; /&gt;
              &lt;deny verbs=&quot;HEAD&quot; users=&quot;*&quot; /&gt;
              &lt;deny verbs=&quot;PROPFIND&quot; users=&quot;*&quot; /&gt;
              &lt;deny verbs=&quot;COPY&quot; users=&quot;*&quot; /&gt;
              &lt;deny verbs=&quot;LOCK&quot; users=&quot;*&quot; /&gt;
              &lt;deny verbs=&quot;UNLOCK&quot; users=&quot;*&quot; /&gt;
              &lt;deny verbs=&quot;PROPPATCH&quot; users=&quot;*&quot; /&gt;
              &lt;deny verbs=&quot;MKCOL&quot; users=&quot;*&quot; /&gt;
              &lt;deny verbs=&quot;MOVE&quot; users=&quot;*&quot; /&gt;
              &lt;deny verbs=&quot;DELETE&quot; users=&quot;*&quot; /&gt;
          &lt;/authorization&gt;
      &lt;/system.web&gt;
  
    &lt;/location&gt;
  &lt;/configuration&gt;
  </code></pre>
  <p>But this didn't work - any ideas?</p>