When I switch my ASP.NET MVC project from Cassini web server to IIS Express, this is added to my applicationhost.config file:
applicationhost.config
It was because for some reason, this was in my csproj file:
disabled
Setting it to enabled fixes the issue (it can also be done from Visual Studio, select project, F4, set Anonymous Authentication in the properties grid to Enabled).
enabled