2 ms·
Seems like you can't add a system.webServer node on the machine.config, but you could add it to applicationHost.config (source: http://www.iis.net/learn/get-sta
by Khao 12y ago
Seems like you can't add a system.webServer node on the machine.config, but you could add it to applicationHost.config (source: http://www.iis.net/learn/get-started/planning-your-iis-architecture/the-configuration-system-in-iis-7 http://www.iis.net/learn/get-started/planning-your-iis-archi... ) so yes, that would be faster. You have to make sure that none of your web.config files override that setting though!
- JonBons 12y agoI believe IIS supports locking attributes (source: http://www.iis.net/learn/get-started/planning-for-security/how-to-use-locking-in-iis-configuration http://www.iis.net/learn/get-started/planning-for-security/h...) so you should be able to lock at applicationHost.config and restrict further modifications. (I'm testing this now) EDIT: It causes a config error when a lock violation occurs which means the site gets an error 500 so its not an ideal fix.