It looks like <requestFiltering> prohitbit your request.
1. Open up %windir%\system32\inetsrv\config\applicationHost.confg
2. Find the section system.webServer/security/requestFiltering. Then, find sub element <fileExtensions> and <hiddenSegments>
At this point, you have two choices.
1) Set attribute applyToWebDAV = 'false' to bypass requestFiltering with WebDAV request for both <fileExtensions> and <hiddenSegments> elements.
ex)
<fileExtensions allowUnlisted="true" applyToWebDAV="false">
<hiddenSegments applyToWebDAV="false">
2) Explicitly turn off filtering for .mdb and web.config
ex)
<fileExtensions allowUnlisted="true" applyToWebDAV="true">
<add fileExtension=".mdb" allowed="true" />
...
<hiddenSegments applyToWebDAV="true">
<remove segment="web.config" />
Please, note that if you take 2), all http requests are affected. But, 1) is only for WebDAV request.