« Previous Next »

Thread: Configuration section not allowed to be set below application

Last post 07-13-2009 11:21 PM by Leo Tang - MSFT. 3 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (4 items)

Sort Posts:

  • 07-08-2009, 4:53 PM

    Configuration section not allowed to be set below application

    In the IIS 7.0 management console on Vista I finally found out where they hid the previously easily accessible access permissions - on the Handler Mappings bit. But when I double click on there from my virtual directory I get the following message:

    "Configuration section not allowed to be set below application"

    It says the problem is with line 16 in my web.config file. Here's the relevant section:

    <system.webServer>
            <modules>
                <add name="LogModule" type="blah.blah.Service.Core.LogModule" preCondition="managedHandler"/>
            </modules>
            <validation validateIntegratedModeConfiguration="false"/>
        </system.webServer>

    I have no idea what any of that means. Can anyone help? I commented out that section and was able to get in.

  • 07-09-2009, 2:06 AM In reply to

    Re: Configuration section not allowed to be set below application

    Do you have web.config file in both folders that is in webroot and in virtual directory as well? You can test virtual directory :- select virtual directory in question >> click on Basic Settings under Action pane >> a pop up window will appear >> here click on button "Test Settings..."
  • 07-09-2009, 9:37 AM In reply to

    Re: Configuration section not allowed to be set below application

    Hmm, I get one tick and then this with the 2nd item:

    The server is configured to use pass-through authentication with a built-in account to access the specified physical path. However, IIS Manager cannot verify whether the built-in account has access. Make sure that the application pool identity has Read access to the physical path. If this server is joined to a domain, and the application pool identity is NetworkService or LocalSystem, verify that <domain>\<computer_name>$ has Read access to the physical path. Then test these settings again.

    Not sure what to make of that.

  • 07-13-2009, 11:21 PM In reply to

    Re: Configuration section not allowed to be set below application

    Hi,

    The system.webServer/modules section is defined as allowDefinition="MachineToApplication" by default. We can have this section in Machine.config ,ApplicationHost.config, Root application Web.config or Application Web.config.

    You can either convert the virtual directory to an application(Right-Click the virtual directory ->Convert to Application) or modify the web.config file.

    richiebabes99:
    The server is configured to use pass-through authentication with a built-in account to access the specified physical path. However, IIS Manager cannot verify whether the built-in account has access. Make sure that the application pool identity has Read access to the physical path. If this server is joined to a domain, and the application pool identity is NetworkService or LocalSystem, verify that <domain>\<computer_name>$ has Read access to the physical path. Then test these settings again.

    IIS can only verify those built-in accounts access during runtime. Hence, you got the warning above. You can safely ignore this warning.

    Leo Tang
    Microsoft Online Community Support

    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
Page 1 of 1 (4 items)