SafeGuard Enterprise Server: Section locked at a parent level on IIS 7.x and HTTP Error 500.19

  • Article ID: 111262
  • Updated: 26 Nov 2014

One or more of the following errors may be displayed:

Authentication error
When navigating within the IIS MMC snap-in to Default-Web Site | SGNSRV | Authentication, one or more of the following errors may be displayed:

There was an error while performing this operation
[path details]
Error: This configuration section cannot be used at this path. This happens when the section is locked at a parent level.

HTTP error
May be seen when browsing the SafeGuard Enterprise webpage http://SERVERNAME/SGNSRV

HTTP Error 500.19 - Internal Server Error
Error Code 0x80070021

Known to apply to the following Sophos product(s) and version(s)
SafeGuard Enterprise Web Server 5.50

Operating System
Mircosoft Windows 2008 Server (32bit), Microsoft Windows 2008 Server R2 (64bit)

What To Do

  1. Navigate to %WINDIR%\system32\inetsrv\config\
  2. Create a backup copy of the file applicationhost.config and save it to a different location.
  3. Open applicationhost.config in Notepad.
  4. Search for <location path"Default Web Site/SGNSRV">. If found continue with step 4.1 otherwise follow step 4.2
4.1. If you find the entry, verify that it is set correctly, if necessary edit it so that reads
<location path="Default Web Site/SGNSRV" overrideMode="Allow">
4.2. If the entry cannot be found copy and paste the following text 
<location path="Default Web Site/SGNSRV" overrideMode="Allow">
<directoryBrowse />
<clientCache />
<files />
<anonymousAuthentication />
<basicAuthentication />
to the end of the applicationhost.config, file right above the last line "</configuration>".
as shown in the screen shot below. Alternatively type the lines into the same location

5. Save the applicationhost.config and restart IIS services

If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent