IIS Configuration setup for Windows Auth seems incorrect

### Description

We are trying to deploy an ASPNET Core 8 app with Win auth enabled (only) on IIS hosted on Server 2016. The steps given for doing this seem incorrect, at least for 2016. Maybe they are correct for later versions of Windows? Perhaps a note would be useful if this is the case.

For our case you cannot add the auth info to web.config because the section is locked by the applicationhost.config file. When you use the COnfiguration Editor to look at the settings then you can see it is using the applicationhost.config file for authentication settings. If you adjust the auth settings in IIS then they are properly reflected in the applicationhost.config file. If you attempt to put these entries in the web.config (as the docs say to do) then the site fails to load because of a configuration error.

### Page URL

https://learn.microsoft.com/en-us/aspnet/core/security/authentication/windowsauth?view=aspnetcore-8.0&tabs=visual-studio

### Content source URL

https://github.com/dotnet/AspNetCore.Docs/blob/main/aspnetcore/security/authentication/windowsauth.md

### Document ID

fbc36c26-9992-1f4c-66d3-02f898ee7ec4

### Article author

@Rick-Anderson