ASP.NET - IIS7 Deployment Error 500 24 50 using WCF Web Service Binding w/ AD Groups -

background: getting internal server 500 24 50 error after deploying application has compiled without errors on local machine. server application deployed on has ton of security , running iis 7.5 need specify read , write access every directory. application uses windows authentication , web service populate drop down boxes via proxy. think there might issue connecting web service or issue read/write security on files, or issue active directory authentication.

for reason, internet explorer displayed can't load webpage error.

error in google chrome:

 500 – internal server error.  there problem resource looking for, , cannot displayed.  

log file details:

 #software: microsoft internet information services 7.5  #fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(user-agent) cs(cookie) cs(referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken   2011-05-18 13:54:46 w3svc1 fl-tpa-web-01 172.17.1.25 / - 80 -   172.17.1.25 http/1.1 mozilla/4.0+(compatible;+msie+8.0;+windows+nt+6.1;+wow64;  +trident/4.0;+slcc2;+.net+clr+2.0.50727;+.net4.0c;+.net4.0e) - -  invitations.myagencyservices.com 500 24 50 1380 368 15 

msdn defines error @ http://support.microsoft.com/kb/943891 as:

  500.24 - asp.net impersonation configuration not apply in managed             pipeline mode. 

web.config code:

  <system.web>   <customerrors mode="off" ></customerrors>   <compilation debug="true" strict="false" explicit="true" targetframework="4.0" />   <trace enabled="true" pageoutput="true" />     <authentication mode="windows"/>    <identity impersonate="true"/>        <authorization>               <allow users="alg\bmccarthy, alg\phoward" />                    <allow roles="alg\acomp_user_admin" />     <allow roles="alg\acomp_user_amg" />     <allow roles="alg\acomp_user_big" />     <allow roles="alg\acomp_user_nis" />     <allow roles="alg\acomp_user_gla" />     <allow roles="alg\acomp_user_pip" />     <allow roles="alg\acomp_user_psm" />     <allow roles="alg\acomp_user_pam" />     <allow roles="alg\acomp_user_ann" />     <allow roles="alg\acomp_user_aam" />     <allow roles="alg\acomp_user_mwm" />      <allow roles="alg\acomp_user_gim" />     <deny users="*" />         </authorization>    </system.web>    <system.webserver>     <modules runallmanagedmodulesforallrequests="true"/>   </system.webserver>    <system.servicemodel>     <bindings>     <basichttpbinding>     <binding name="basichttpbinding_iacompservice1" closetimeout="00:01:00"       opentimeout="00:01:00" receivetimeout="00:10:00" sendtimeout="00:01:00"       allowcookies="false" bypassproxyonlocal="false" hostnamecomparisonmode="strongwildcard"       maxbuffersize="65536" maxbufferpoolsize="524288" maxreceivedmessagesize="65536"       messageencoding="text" textencoding="utf-8" transfermode="buffered"       usedefaultwebproxy="true">       <readerquotas maxdepth="32" maxstringcontentlength="8192" maxarraylength="16384"         maxbytesperread="4096" maxnametablecharcount="16384" />       <security mode="none">         <transport clientcredentialtype="none" proxycredentialtype="none"           realm="" />         <message clientcredentialtype="username" algorithmsuite="default" />         </security>       </binding>    </basichttpbinding>   </bindings>      <client>         <endpoint address="http://63.236.108.91/acompservice.svc" binding="basichttpbinding"     bindingconfiguration="basichttpbinding_iacompservice1" contract="acomp_servicereference.iacompservice"     name="basichttpbinding_iacompservice1" />     </client>   </system.servicemodel> 

any suggestions up-voted! looking!

the 500.24.50 error occurs because asp.net integrated mode unable impersonate request identity in beginrequest , authenticaterequest pipeline stages. 500.24 thrown if application running in integrated mode, validateintegratedmodeconfiguration not declared or set true, , application has identity impersonate set true.

workaround

a. if application not rely on impersonating requesting user in beginrequest , authenticaterequest stages (the stages impersonation not possible in integrated mode), ignore error adding following application’s web.config:

  <system.webserver>           <validation validateintegratedmodeconfiguration="false" />   </system.webserver> 

b. if application rely on impersonation in beginrequest , authenticaterequest, or not sure, move classic mode.

c. remove web.config won't effective in integrated mode anyway

read more on breaking changes in iis 7 learn.iis.net