1. Locate the following directory:
%windir%\System32\inetsrv\config
2. Open the applicationHost.config file in a text editor such as Notepad.
3. In the applicationHost.config file, locate the following code:
<section name=”requestFiltering” overrideModeDefault=”Deny” />
4. Replace the code that you found in step 3 with the following code:
<section name=”requestFiltering” overrideModeDefault=”Allow”/>
5.
Open the web.config of your DotNetNuke installation in a text editor such as Notepad.
6.
Insert this code into the web.config after <configSections>
<configuration>
<configSections>
…
</configSections>
<system.webServer>
<security>
<requestFiltering allowDoubleEscaping=”True”/>
</security>
</system.webServer>
…
</configuration>
This is for IIS 7.0