Resolving HTTP Error 500.19 - Internal Server Error Due to Authentication Configuration Issues

Resolving HTTP Error 500.19 - Internal Server Error Due to Authentication Configuration Issues

Issue Description

When attempting to access UiPath Orchestrator, you may encounter the following error:

Config Error:

This configuration section cannot be used at this path. This happens when the section is locked at a parent level.
Locking is either by default (overrideModeDefault="Deny") or set explicitly by a location tag with overrideMode="Deny" or the legacy allowOverride="false".

Config File:

\?\C:\Program Files (x86)\UiPath\Orchestrator\web.config

Config Source:

<authentication>
   <windowsAuthentication enabled="true" />
</authentication>

This issue is caused by the IIS configuration preventing the override of authentication settings.


Resolution

  1. Open the applicationHost.config file located at:

C:\Windows\System32\inetsrv\Config\applicationHost.config


  1. Look for the following lines:

<section name="windowsAuthentication" overrideModeDefault="Deny" />
<section name="anonymousAuthentication" overrideModeDefault="Deny" />
<add name="WindowsAuthenticationModule" lockItem="true" />
<add name="AnonymousAuthenticationModule" lockItem="true" />
  1. Modify these lines to allow overrides:

<section name="windowsAuthentication" overrideModeDefault="Allow" />
<section name="anonymousAuthentication" overrideModeDefault="Allow" />
<add name="WindowsAuthenticationModule" lockItem="false" />
<add name="AnonymousAuthenticationModule" lockItem="false" />
  1. Save the applicationHost.config file.

  2. Restart IIS to apply the changes. To do this, open Command Prompt as an administrator and run:

iisreset
  1. Wait a few moments for IIS to reload the updated configurations.


Expected Outcome

After completing these steps, you should be able to access UiPath Orchestrator without encountering the HTTP Error 500.19.

If the issue persists, verify that you have the necessary administrative privileges to modify the IIS configuration and that no other security policies are preventing the changes from taking effect.


Additional Notes

  • Ensure you take a backup of the applicationHost.config file before making any changes.

  • If your environment has specific security policies, consult your IT team before modifying authentication settings.