Removing Host Intrusion Prevention 8.0 from a server running IIS 7.0 does not remove the ISAPI references
Technical Articles ID:   KB72677
Last Modified:  1/22/2018


McAfee Host Intrusion Prevention (Host IPS) 8.0

Microsoft Windows Server 2008 with IIS 7.0


If you remove Host IPS 8.0 from a server running Microsoft Windows Server 2008 with IIS 7.0, the ISAPI filter references are not removed from the IIS applicationHost.config file.




Edit the IIS 7.0 applicationHost.config file and remove the following ISAPI filter configuration lines:
  1. Press Windows+R, type explorer, and click OK.
  2. Navigate to: %windir%\system32\inetsrv\config
  3. Open the file applicationHost.config as Administrator for editing in Notepad.
  4. Edit the <globalModules> section and remove the following line:

    <add name="MfeEngine" image="%windir%\System32\inetsrv\HipIISEngineStub.dll" />
  5. Edit the <modules> section and remove the following line:

    <add name="MfeEngine" />
  6. Save the file.
  7. Restart the IIS server using the command iisreset or by restarting the system.


The content of this article originated in English. If there are differences between the English content and its translation, the English content is always the most accurate. Some of this content has been provided using Machine Translation translated by Microsoft.

Rate this document

Did this article resolve your issue?

Please provide any comments below

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms

 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.