We are having some issues with the Server Lockdown guide for Coldfusion 9. It seems to break at the applicationhost.config file when we enter the deny sequences to restrict access to the Coldfusion folder paths.

[aaronsfc]

In the block/CFIDE requests section of the Server Lockdown guide for Coldfusion 9, when we edit the applicationHost.config file to block Coldfusion URL sequences, Coldfusion brings up an error HTTP Error 500.19 internal server error.  A web.config file was also created and placed in the web root of the Coldfusion install.  How can we fix this?

Thanks in advance

[Anit_Kumar]

After making changes to applicationHost.config, remove the web.config (after taking a backup) and restart IIS.

This should fix the issue.

Regards,

Anit Kumar

[aaronsfc]

This worked!  But why did I have to remove the web.config file when the instructions say to include the file in the wwwroot?

[Anit_Kumar]

Wow. That is great. Your web.config certainly had something, which was breaking ColdFusion. Secondly, whenever you make changes to applicationHost.config, an IIS restart is required as well.

This fixed the issue.

Regards,

Anit Kumar