this configuration section cannot be used at this path. this happens when the section is locked at a parent level. locking is either by default (overridemodedefault="deny"), or set explicitly by a location tag with overridemode="deny" or the legacy allowoverride="false".
Goto : C:\Windows\System32\inetsrv\config
Open : applicationHost.config
Find : <section name="modules" allowDefinition="MachineToApplication" overrideModeDefault="Deny" />
Replace : <section name="modules" allowDefinition="MachineToApplication" overrideModeDefault="Allow" />