IIS 7 - ASP.NET Administration

Re: Configuration section not allowed to be set below application

Leo Tang - MSFT — Tue, 14 Jul 2009 03:21:44 GMT

Hi,

The system.webServer/modules section is defined as allowDefinition="MachineToApplication" by default. We can have this section in Machine.config ,ApplicationHost.config, Root application Web.config or Application Web.config.

You can either convert the virtual directory to an application(Right-Click the virtual directory ->Convert to Application) or modify the web.config file.

richiebabes99:
The server is configured to use pass-through authentication with a built-in account to access the specified physical path. However, IIS Manager cannot verify whether the built-in account has access. Make sure that the application pool identity has Read access to the physical path. If this server is joined to a domain, and the application pool identity is NetworkService or LocalSystem, verify that <domain>\<computer_name>$ has Read access to the physical path. Then test these settings again.

IIS can only verify those built-in accounts access during runtime. Hence, you got the warning above. You can safely ignore this warning.

Re: Configuration section not allowed to be set below application

richiebabes99 — Thu, 09 Jul 2009 13:37:03 GMT

Hmm, I get one tick and then this with the 2nd item:

The server is configured to use pass-through authentication with a built-in account to access the specified physical path. However, IIS Manager cannot verify whether the built-in account has access. Make sure that the application pool identity has Read access to the physical path. If this server is joined to a domain, and the application pool identity is NetworkService or LocalSystem, verify that <domain>\<computer_name>$ has Read access to the physical path. Then test these settings again.

Not sure what to make of that.

Re: Configuration section not allowed to be set below application

Gabriel_EUK — Thu, 09 Jul 2009 06:06:19 GMT

Do you have web.config file in both folders that is in webroot and in virtual directory as well? You can test virtual directory :- select virtual directory in question >> click on Basic Settings under Action pane >> a pop up window will appear >> here click on button "Test Settings..."

Configuration section not allowed to be set below application

richiebabes99 — Wed, 08 Jul 2009 20:53:20 GMT

In the IIS 7.0 management console on Vista I finally found out where they hid the previously easily accessible access permissions - on the Handler Mappings bit. But when I double click on there from my virtual directory I get the following message:

"Configuration section not allowed to be set below application"

It says the problem is with line 16 in my web.config file. Here's the relevant section:

<system.webServer>
        <modules>
            <add name="LogModule" type="blah.blah.Service.Core.LogModule" preCondition="managedHandler"/>
        </modules>
        <validation validateIntegratedModeConfiguration="false"/>
    </system.webServer>

I have no idea what any of that means. Can anyone help? I commented out that section and was able to get in.