There are two requirements for this , most articles do not mention the second requirement.

1. In the ASP configuration set " Send error to browser" to true

You can also do it using the the command-line tool AppCmd.exe

appcmd.exe set config "Default Web Site" -section:system.webServer/asp /scriptErrorSentToBrowser:"True"

http://www.iis.net/learn/application-frameworks/running-classic-asp-applications-on-iis-7-and-iis-8/classic-asp-script-error-messages-no-longer-shown-in-web-browser-by-default

2. In the Error pages Configuration go to " Edit Feature Settings" on the right & select " Detailed Errors"

http://stackoverflow.com/questions/2640526/detailed-500-error-message-asp-iis-7-5

Note this applies to all errors.

While processing a TGS request for the target server krbtgt XXXXXXXX
did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 8).
The requested etypes were 18.  The accounts available etypes were 23  -133  -128  3  1.

Event Type: Error
Event Source: KDC
Event Category: None
Event ID: 27

The cause of the event is that the client requests a service ticket with a etype 18 (aes256-cts-hmac-sha1-96), which is not supported by Windows Server 2003 but supported by Windows Server 2008 R2. If the Kerberos authentication works properly, you can safely ignore the events. It just informs the clients what etypes it supports.

For more information, please refer to the following articles:

The security principals and the services that use only DES encryption for Kerberos authentication are incompatible with the default settings on a computer that is running Windows 7 or Windows Server 2008 R2

http://support.microsoft.com/kb/977321


Event ID 27 — KDC Encryption Type Configuration

http://technet.microsoft.com/en-us/library/cc733974(WS.10).aspx

This one drove me crazy. Many help articles start with  " start adsiedit and browse to CN=Configuration CN=Services ....." . I could not see CN=Configuration to save my life.

After hours of hair pulling I found this article Thanks David

http://www.kineticcomputer.com/tips/1103-cannot-see-configuration-container-in-adsiedit.htm

If it helped would appreciate a rating star.

Ashwin
Lansend.com
Microsoft Certified Partner