Configure Windows AD authentication
If you intend to use federated Windows AD authentication, the configuration sections for windows- and anonymous authentication need to be unlocked in IIS.
The install script will attempt to do this automatically. If the script fails, they can be unlocked manually using:
#%systemroot%\system32\inetsrv\appcmd unlock config /section:windowsAuthentication
#%systemroot%\system32\inetsrv\appcmd unlock config /section:anonymousAuthentication