We have a dotnet core 3.1 web API application that is published to an IIS 10 hosted on a Windows 2012 R2 datacenter VM.
The application is running under an application pool that has no managed code:
IIS is not able to read the web.config. This is what I get when clicking this app's Connection Strings in IIS:
web.config
<?xml version="1.0" encoding="UTF-8"?>
<configuration>
<system.webServer>
<security>
<authorization>
<remove users="" roles="mydomain\mydevrole" verbs="" />
<add accessType="Allow" users="?" roles="" />
</authorization>
</security>
</system.webServer>
</configuration>