There are usually a few more lines in that error response that points to the exact line in the config file (and hence the locked section) that has the problem. You will either have to unlock that section or not use it in your application’s web.config file.
For e.g., one can lock/unlock handlers/modules sections by either
use appcmd.exe
%windir%\system32\inetsrv\appcmd
unlock config -section:system.webServer/handlers
%windir%\system32\inetsrv\appcmd
unlock config -section:system.webServer/modules
OR
manually change value from "Deny" to
"Allow" for below settings in %windir%\system32\inetsrv\config\
applicationHost.config
<section
name="handlers" overrideModeDefault="Deny" />
<section
name="modules" allowDefinition="MachineToApplication"
overrideModeDefault="Deny"/>
You can also configure the locking via IIS manager UI.
http://blogs.iis.net/webtopics/archive/2010/03/08/troubleshooting-http-500-19-errors-in-iis-7.aspx
Or try this one
Solution:
1. Add IIS_IUSRS with Read permission on files in the folder
2. Change IIS authentication method to BasicAuthentication
3. refresh the website. It will work
Identify the user under which your web site’s application pool is running under.
2. Add this user as a User Account on your local machine and add them to the IIS_IUSRS Group (the names have been obscured to protect the innocent).