Unlocking config sections breaks IIS

[mrichman]

In my Dockerfile, I need to unlock several config sections as follows:

RUN & c:\windows\system32\inetsrv\appcmd.exe unlock config /section:system.web/authentication

My app requires <authentication mode="Windows" />.

In my container, IIS works fine until I run this command in my image. Then I get this error using the PS command Get-EventLog application -newest 1 | format-list:

The worker process for application pool 'DefaultAppPool' encountered an error 'Configuration file is not well-formed XML trying to read configuration data from file '\?\C:\inetpub\temp\apppools\DefaultAppPool\DefaultAppPool.config', line number '3'. The data field contains the error code.

I also tried changing the runtime of the DefaultAppPool to 4.5, thinking that might help:

Set-ItemProperty -Path IIS:\AppPools\DefaultAppPool\ -Name managedRuntimeVersion -Value 'v4.5'

But that made no difference, even after restarting IIS inside the container.

Attemping iisreset produces these errors:

Index : 479
EntryType : Error
InstanceId : 3221232473
Message : The World Wide Web Publishing Service service depends on the Windows Process Activation Service
service which failed to start because of the following error:
%%50
Category : (0)
CategoryNumber : 0
ReplacementStrings : {World Wide Web Publishing Service, Windows Process Activation Service, %%50}
Source : Service Control Manager
TimeGenerated : 2/25/2017 11:41:06 PM
TimeWritten : 2/25/2017 11:41:06 PM
UserName :

Index : 478
EntryType : Error
InstanceId : 3221232495
Message : The Windows Process Activation Service service terminated with the following error:
%%50
Category : (0)
CategoryNumber : 0
ReplacementStrings : {Windows Process Activation Service, %%50}
Source : Service Control Manager
TimeGenerated : 2/25/2017 11:41:06 PM
TimeWritten : 2/25/2017 11:41:06 PM
UserName :