Removing HTTP headers for security and URLScan 3.1

Hi,

I am in search of a simple solution to remove HTTP headers from HTTP responses on IIS 7.5.

I have read the details about URLScan 3.1 and feel that it's too much of an overkill, especially if I have to implement it across a huge IIS server farm.

The question I have is, Is there a simpler and standard way other than using URLScan 3.1?

I am aware of the following approaches:

1) Implement custom code or Http Handlers to do this.

2) Modify Machine.config and/or Web.config on each server to do this.

3) Install and configure URLScan 3.1 for IIS 7.5 to do this.

4) Modify the server registry setting to remove headers. (not sure what this will remove and if this can be controlled specifically for different header entities) HKLM\SYSTEM\CurrentControlSet\Services\HTTP\Parameters\DisableServerHeader

Any other approaches that are possible? like using AppCmd or Powershell to perform a set of configuration changes?