IIS Config Error - This configuration section cannot be used at this path


I am getting the below error when I try to run my website.

The website is hosted on Windows 2012 R2.

Config error: This configuration section cannot be used at this path. This happens when the section is locked at a parent level. Locking is either by default (overrideModeDefault="Deny"), or set explicitly by a location tag with overrideMode="Deny" or the legacy allowOverride="false".

Error Code : 0x80070021

Config Source:

 60:     <httpErrors errorMode="Detailed" />
 61:     <handlers>
 62:       <remove name="ExtensionlessUrlHandler-Integrated-4.0" />

Below is what all I have tried:

  1. Installed .Net 3.5 using "Add features and roles" in IIS
  2. In the applicationHost file I have made the below code changes:

    Changed sections handlers', modules, anonymousAuthentication, basicAuthentication,etc overrideModeDefault from "Deny" to "Allow".

  3. Have done "HTTP Activation" in .Net 3.5 as well as 4.5.

Below is my web config file handler code:

  <remove name="ExtensionlessUrlHandler-Integrated-4.0"/>
  <remove name="OPTIONSVerbHandler"/>
  <remove name="TRACEVerbHandler"/>
  <add name="ExtensionlessUrlHandler-Integrated-4.0" path="*." verb="*" type="System.Web.Handlers.TransferRequestHandler" preCondition="integratedMode,runtimeVersionv4.0"/>
  1. Installed all the features in features windows in this path: Internet Information Service --> World Wide Web Services --> Application development features --> All but CGI have been enabled.

  2. In feature delegation ASP was Read Only earlier, I have changed it to Read/Write

  3. Unlocked handlers using command prompt

But I am still unable to get rid of the error. My local instance is working perfectly fine. Also, I have a development server on which this website is working, only in my production server I am getting this error.

Please help me to find out what might be causing this problem.

asked on Stack Overflow Dec 10, 2015 by thenakulchawla

9 Answers


Follow the below steps to unlock the handlers at the parent level:

1) In the connections tree(in IIS), go to your server node and then to your website.

2) For the website, in the right window you will see configuration editor under Management.

3) Double click on the configuration editor.

4) In the window that opens, on top you will find a drop down for sections. Choose "system.webServer/handlers" from the drop down.

5) On the right side, there is another drop down. Choose "ApplicationHost.Config "

6) On the right most pane, you will find "Unlock Section" under "Section" heading. Click on that.

7) Once the handlers at the applicationHost is unlocked, your website should run fine.

answered on Stack Overflow Feb 11, 2016 by thenakulchawla

Heres what worked for me, had a similar problem on my new laptop which had windows 10.

  • Search for "Turn windows features on or off"
  • Check "Internet Information Services"
  • Check "World Wide Web Services"
  • Check "Application Development Features"
  • Enable all items under this

try again, now it should work.

answered on Stack Overflow Sep 11, 2016 by Yasser Shaikh

Most IIS sections are locked by default but you can "unlock" them by setting the attribute overrideModeDefault from "Deny" to "Allow" for the relevant section group by modifying the ApplicationHost.config file located in %windir%\system32\inetsrv\config in Administrator mode

enter image description here

answered on Stack Overflow May 22, 2017 by Frank Fu • edited Jun 26, 2018 by Frank Fu

I came across this thread and solve the issue by below steps, My problem may be different. Hope this can help some one .

In Turn windows feature on and off navigate to server roles and select the least below mentioned items .

enter image description here

Cheers !

answered on Stack Overflow Oct 23, 2018 by Usman Younas

I had an applicationhost.config inside my project folder. It seems IISExpress uses this folder, even though it displays a different file in my c:\users folder


answered on Stack Overflow Mar 22, 2017 by Rob Sedgwick

When I tried these steps I kept getting error:

  1. Search for "Turn windows features on or off"
  2. Check "Internet Information Services"
  3. Check "World Wide Web Services"
  4. Check "Application Development Features"
  5. Enable all items under this

Then i looked at event viewer and saw this error:Unable to install counter strings because the SYSTEM\CurrentControlSet\Services\ASP.NET_64\Performance key could not be opened or accessed. The first DWORD in the Data section contains the Win32 error code.

To fix the issue i manually created following entry in registry:


and followed these steps:

  1. Search for "Turn windows features on or off"
  2. Check "Internet Information Services"
  3. Check "World Wide Web Services"
  4. Check "Application Development Features"
  5. Enable all items under this
answered on Stack Overflow Feb 12, 2019 by SharpCoder

I think the better way is that you must remove you configuration from your web.config. Publish your code on the server and do what you want to remove directly from the IIS server interface.

Thanks to this method if you sucessfully do what you want, you just have to get the web.config and compare the differences. After that you just have to post the solution in this post :-P.

answered on Stack Overflow Dec 11, 2015 by D4rkTiger

Click on your project properties, go to the web section, from the Servers section, change from IIS express to Local IIS, it will create a virtual directory for you

answered on Stack Overflow Jul 6, 2017 by user8266077

Below is what worked for me:

  1. In IIS Click on root note "LAPTOP ____**".
  2. From option being shown in middle tray, Click on Configuration editor at bottom.
  3. In Top Drop Down select "system.webServer/handlers".
  4. At right window in Section Unlock Section.
answered on Stack Overflow Aug 16, 2020 by Ojha

User contributions licensed under CC BY-SA 3.0