IIS ApplicationHost.config file disappeared from my VM

Question

IIS ApplicationHost.config file disappeared from my VM

Hashvin Rao (MY) 10

Hello team,

Greetings. I would like to check, regarding from the subject I would like to know why my IIS ApplicationHost.config file is missing out of sudden. I tried many possible ways to restore back however it is not working. Whenever I attempted to restore the file, it gives this error:-

User's image

I had tried to restore from C:\inetpub\history\CFGHISTORY_XXXXXXXXXX still can't. I already checked with our Plesk team and they recommended to check with Microsoft team since IIS belongs to them.

I need this issue fix ASAP. What is the solution?

Thanks.

4 answers

Your answer

Answer 1

Hi Hashvin Rao (MY),

Thanks for reaching out!

Quick recap: Your applicationHost.config file appears missing, and attempts to restore from C:\inetpub\history\CFGHISTORY_XXXXXXXXXX fail with error 0x80070103 (No more data is available). This is a recoverable issue because IIS relies on this file for site and app pool configuration. Common causes include:

File lock by IIS services (W3SVC, WAS, AppHostSvc) or antivirus
Shared Configuration enabled (config stored on a UNC path)
Plesk-managed IIS (manual edits blocked; must use Plesk repair tools)
Permissions or ownership issues in %windir%\System32\inetsrv\config

You could try these solutions out:

Check if Shared Configuration is enabled

"%windir%\system32\inetsrv\appcmd.exe" list config /section:sharedConfiguration

If enabled="true", restore the config on the UNC path in redirection.config.

Reference: Shared Configuration in IIS

Stop IIS services to release locks

net stop w3svc
net stop was
net stop apphostsvc

Restore from IIS Configuration History

Copy applicationHost.config from a CFGHISTORY folder:

robocopy "C:\inetpub\history\CFGHISTORY_XXXXXXXXXX" "%windir%\System32\inetsrv\config" applicationHost.config /R:0

Reference: Recover from Configuration History

If that fails, use AppCmd backup/restore

appcmd list backup
appcmd restore backup "<Name>" /stop:true

Reference: AppCmd Backup and Restore

On Plesk servers, let Plesk rebuild IIS config

plesk repair web -y
"%plesk_bin64%\websrvmng.exe" --reconfigure-all

Reference: Plesk Repair Utility

Restart services and verify

net start apphostsvc
net start was
net start w3svc
appcmd list site

I also managed to find some similar cases you can check out when you have the time:

I hope this helps you resolve your issue! If you have any more issues, please feel free to reach out - I'll be happy to help!

Answer 2

Hashvin Rao (MY) 10

Hello Tom,

Good day. Thanks for the revert. I had tried to restore the backup from C:\inetpub\history\ however whenever I am restoring, I am having access denied issue. Like error below:-

ERROR ( hresult:80070005, message:Command execution failed

I am wondering why am I getting this and yeah am running everything as administrator.

To add, I am trying to run this command in powershell or cmd getting error like below:-

User's image

Please advise us on this. Thanks.

Tom Tran (WICLOUD CORPORATION) 1,920 Reputation points Microsoft External Staff

2025-08-29T10:50:04.8366667+00:00
Hi Hashvin Rao (MY),

Thanks for the update! Sorry the first solutions failed.

If possible, can you try other solutions I provided as well to see if they work? If all fails, you can try:

Run DISM and SFC to repair Windows components:

DISM /Online /Cleanup-Image /RestoreHealth sfc /scannow

If IIS still cannot read config, reinstall IIS and reapply site configs from backups.

If built-in recovery and repair tools fail, the next step is to involve Microsoft Support for deeper investigation: Create a Microsoft Support Request
Tom Tran (WICLOUD CORPORATION) 1,920 Reputation points Microsoft External Staff

2025-09-03T03:22:32.62+00:00

Hi Hashvin Rao (MY),

Just checking to see if your issue has been resolved - If you have any more questions, please feel free to reach out!
Hashvin Rao (MY) 10 Reputation points

2025-09-04T11:27:59.47+00:00

Hello Tom,

It appears to be the issue still persisted. Therefore what we had did was since this is a production VM, to apply any changes first we duplicate the exact the same VM to another windows node and did the troubleshoot as per your guide still the same.

To add, we had boot into safe mode it appears everything fine however when the moment we normal boot into our VM the file still not readable by IIS and the respective file in the config folder still been renamed and can’t change to original fine name.

For this case, is there any possibility you can check for us and we glad to provide our server access to your team to check further.

Please revert back. Thanks.
Tom Tran (WICLOUD CORPORATION) 1,920 Reputation points Microsoft External Staff

2025-09-05T03:01:02.63+00:00
Hi Hashvin Rao (MY),

Thank you for your patience and for sharing the detailed troubleshooting steps you’ve already taken. I truly understand how critical this is for your production environment, and I’m sorry the issue persists despite all efforts.

From your description:

The applicationHost.config file works fine in Safe Mode but becomes unreadable in normal boot.

Attempts to restore from C:\inetpub\history fail with Access Denied (HRESULT: 0x80070005) even when running as Administrator.

appcmd commands cannot read the configuration file.

This behavior is not caused by IIS itself. IIS does not rename or delete applicationHost.config on its own. The fact that the file works in Safe Mode but fails in normal mode strongly suggests external interference, such as:

Third-party services or security software (e.g., antivirus, Plesk agents) renaming or locking the file.

Corrupted ACLs or restrictive security policies on %windir%\System32\inetsrv\config.

File system filter drivers or malware protection altering file operations during normal boot.

IIS is impacted because it cannot read its configuration, but the root cause lies at the OS or third-party level.

At this point, the issue requires deep OS-level diagnostics (e.g., Process Monitor traces, ACL audits, or live debugging) that cannot be performed through this forum. The fastest and safest resolution is to engage Microsoft Support, where an engineer can securely access your environment and identify the root cause.

There are 2 options you can try:

Option 1: Create a Microsoft Support ticket

Go to the official Microsoft Support page here:

Sign in with the account associated with your Microsoft license

Select a product

Provide these details to expedite the case:

IIS version and Windows build

Steps already attempted (Safe Mode test, DISM/SFC, restore attempts, Plesk repair)

Error codes: 0x80070103 and 0x80070005

Note that the issue reproduces only in normal boot, not in Safe Mode.

Option 2: If you want to re-post on Microsoft Q&A

Since this appears to be an OS-level or security-related issue rather than an IIS-only problem, I recommend using this tag Windows for business | Windows Server | User experience | Other for better visibility.

I do apologize for not being helpful, but this issue requires help from professional rather than general fixes on this Forum. If you find my answer useful, please feel free to mark it so others with the same issue can seek guidance from your post.

Again, I am sorry for wasting your time and I hope you get your issue resolved.

Thank you for your time and I wish you the best in the future.
Hashvin Rao (MY) 10 Reputation points

2025-09-05T04:21:23.4+00:00

Hello Tom,

Thanks for the explanation. I tried to submit a ticket to MS support team however unable to send out due to no plan associated with the account.

Is there any possibility that you can send a ticket behalf of us?

Thanks.
Tom Tran (WICLOUD CORPORATION) 1,920 Reputation points Microsoft External Staff

2025-09-05T04:28:09.7366667+00:00

Hi Hashvin Rao (MY),

Apologies but I cannot send a ticket on your behalf since it is tied to users, and I do not have authority to provide your personal information whatsoever because it is a violation conduct on Microsoft Q&A.

So it is best you create a ticket with your own account and wait for Microsoft's employees to contact you.

Best regards.
Tom Tran (WICLOUD CORPORATION) 1,920 Reputation points Microsoft External Staff

2025-09-18T06:32:12.69+00:00
Hi @Hashvin Rao (MY) ,

I noticed you still seeing this error in the other post. It is true the link provide can be a bit vague, but I managed to piece together a few steps you could try:

Boot into Safe Mode with Networking

Restart the server and press F8 (or use advanced startup options) → choose Safe Mode with Networking.

Run a Full Malware Scan

Use trusted tools like:

Microsoft Safety Scanner

Windows Defender Offline

Remove any detected threats.

Check for Malicious Services or Drivers

In Safe Mode, open Task Manager → Services or run:

sc query type= service state= all

Look for suspicious entries (random names, unknown vendors). Disable them if confirmed malicious.

Restore applicationHost.config

While still in Safe Mode:

cd %windir%\system32\inetsrv appcmd restore backup "CFGHISTORY_##########"

If the backup works in Safe Mode, the file should be restored.

Reboot Normally and Verify

After cleaning malware and restoring the file, reboot normally and check:

dir %windir%\system32\inetsrv\config

If the file disappears again

The system is still infected. Repeat the scan or consider offline scanning or restoring from a clean backup.

I'm not sure if your situation is the same as the other post but please try these steps out just to be sure. Hope it works out for you!
Hashvin Rao (MY) 10 Reputation points

2025-09-25T09:10:53.39+00:00

Hi ,

Still not working anything.
Tom Tran (WICLOUD CORPORATION) 1,920 Reputation points Microsoft External Staff

2025-09-25T09:23:38.3333333+00:00
Hi @Hashvin Rao (MY) ,

I managed to find some links that might help you create a support ticket. You can try out when you have the time:

Option 1: Contact Parter Center

You could take a look at these links below for better details:

https://free.blessedness.top/en-us/answers/questions/2140125/we-cannot-enroll-as-a-microsoft-partner-in-partner

https://free.blessedness.top/en-us/partner-center/support/report-problems-with-partner-center

Option 2: Create an Azure account

You can raise a support request in Azure at no cost by setting up a free tenant and Pay-As-You-Go subscription:

Create a free Azure account

Go to https://azure.microsoft.com/free and sign in with a Microsoft account.

This gives you a free tenant and initial credit.

Activate a Pay-As-You-Go subscription

In the Azure Portal, go to Subscriptions → Add → Pay-As-You-Go.

A credit card is required for verification, but you won’t be charged unless you exceed the free tier.

Enable support

PAYG subscriptions come with free Basic support regarding Subscription and Pricing.

For technical tickets, activate the Developer support plan (trial is free for new PAYG).

Submit a support request

In the portal (portal.azure.com), search for Help + Support → + Create a support request.

Select your subscription, the service (e.g., Virtual Machines, App Service), and describe the issue.

Track progress in Help + Support → All support requests.

Hope this helps! Please tell me how it goes.
Shariq Ahmed 0 Reputation points

2025-09-30T14:42:25.2333333+00:00
Hello everyone,

We are facing this critical issue across our entire fleet of Azure VMs and are hoping to share our findings and seek advice.

Summary of the Issue: The applicationHost.config file is being spontaneously deleted, leading to a complete failure of the IIS service. This is a recurring problem that persists even after a full reinstallation of the operating system.

Windows Server (2022)

The applicationHost.config file disappears from C:\Windows\System32\inetsrv\config\.

The parent config directory becomes locked, preventing any manual attempts to copy, restore, or create a new file in its place.

The issue propagates sequentially across different servers over a period of days.

Most critically, the problem reoccurs approximately one week after a complete OS reinstallation, indicating the cause is external to the server's base configuration.

We have attempted a wide range of solutions, none of which have permanently resolved the issue:

Restoring the configuration file from C:\inetpub\history.

Running file system integrity checks (chkdsk).

Running OS health and repair commands (SFC /scannow, DISM /RestoreHealth).

Performing a complete reinstallation of Windows Server.

Any insights from others who have identified the specific root cause or have suggestions for further investigation would be greatly appreciated.
Mr Roya 0 Reputation points

2025-10-08T11:23:33.81+00:00

Hi, im having the same issue. Tried all above steps not working.

Anyone can assist?
Shariq Ahmed 0 Reputation points

2025-10-21T11:22:33.4066667+00:00

Hashvin Rao (MY)

Hi Hashvin Rao,

Just checking to see if your issue has been resolved ?

We are facing a similar issue and tried everything mentioned here.

Answer 3

Morten Irve 0

Hi - I follow the thread, because I got similar issues.
And none of the above ideas works for me.

But I found a localuser - named: admin - it is not administrator when I found it, but it has deleted 4 different logs - incl. System Eventlogs etc. :-( and NOT created by me.

Do you have the same user on your WM ?

I'm still trying to figure it out.
I can make a file named: applicationHost.confi

But if I add the last G - I get write error or file not found.

Fingers crossed, Irve

Answer 4

Morten Irve 0

Hi again

My issue was a virus - Scan your server and see if you get the same - I booted into safemode - and removed it.
Now all is good :-) User's image

Good luck.

Share via

IIS ApplicationHost.config file disappeared from my VM

4 answers

Your answer