The following answer includes a complete solution that does not require URLScan or a custom HttpModule, and removes all the related headers you mention. It also works on Azure.
Removing/Hiding/Disabling excessive HTTP response headers in Azure/IIS7 without UrlScan