can run appcmd.exe and unlock configSections