What does ISU do to applicationhost.config?

I am trying to explain to someone what the tool does to the application configuration, because they want to do it without using the tool. They just want to edit their applicationhost.config file. I was about to tell them this:

​For every module element in system.webServer/modules, it takes away the lockitem attribute.
It sets the OverrideMode of system.webServer/serverRuntime to Allow.

But then I opened up my own applicationhost.config file, and the serverRunTime Allow thing just does not seem to be true at all.

What you were about to tell them was correct. See the code:


On the latter change, maybe the default is Allow and that’s why you’re not seeing it.