This configuration section cannot be used at this path….!!??

By default within Windows 7 IIS 7.5 Microsoft has locked down the parent security requiring that you explicitly allow certain functions for them to be overridden by using either the IIS interface or by your apps web.config file.

For example I received the following alert in IIS when my web.config file had “Anonymous Authentication” turned on. This alert is displayed when trying to manage the authentication settings within IIS.

“There was an error while performing this operation”
”Error: This configuration section cannot be used at this path.This happens when the section is locked at a parent level. …”

image

Resolution

  1. Open windows explorer c:\Windows\system32\inetsrv\config\
  2. edit applicationHost.config in notepad
  3. Look through xml and change relevant tags from Deny to Allow

In my case I needed to allow anonymousAuthentication so I changed the following:

<sectionGroup name=”authentication”>
<section name=”anonymousAuthentication” overrideModeDefault=”Deny” />
<section name=”basicAuthentication” overrideModeDefault=”Deny” />
<section name=”clientCertificateMappingAuthentication” overrideModeDefault=”Deny” />
<section name=”digestAuthentication” overrideModeDefault=”Deny” />
<section name=”iisClientCertificateMappingAuthentication” overrideModeDefault=”Deny” />
<section name=”windowsAuthentication” overrideModeDefault=”Deny” />
</sectionGroup>

to:

<sectionGroup name=”authentication”>
<section name=”anonymousAuthentication” overrideModeDefault=”Allow” />
<section name=”basicAuthentication” overrideModeDefault=”Deny” />
<section name=”clientCertificateMappingAuthentication” overrideModeDefault=”Deny” />
<section name=”digestAuthentication” overrideModeDefault=”Deny” />
<section name=”iisClientCertificateMappingAuthentication” overrideModeDefault=”Deny” />
<section name=”windowsAuthentication” overrideModeDefault=”Deny” />
</sectionGroup>

Path to config file: c:\Windows\system32\inetsrv\config\applicationHost.config

Advertisements

One Response to This configuration section cannot be used at this path….!!??

  1. I don’t even know how I ended up right here, however I thought
    this put up used to be good. I do not recognise who
    you’re but certainly you’re going to a famous blogger if yoou are
    not already. Cheers!

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: