title: The "&" character breaks passwords that are stored in the web.config
body: <p>I have an ASP.NET MVC3 C# .NET Application running on IIS 7.5.  </p>
  
  <p>We have a Windows NT service account we Impersonate in our code in order to read/write documents to a file share. The user id is compiled in the code and the service account password is stored in the web.config file.  </p>
  
  <p>The password contains an ampersand character (i.e.: <code>p&amp;ssword</code>).  </p>
  
  <p>This broke the site.  When accessing the site we received this error :"Sorry, an error occurred while processing your request".  </p>
  
  <p>Here is the code that uses the password:</p>
  
  <pre><code>    var password = ConfigurationManager.AppSettings.Get(Common.SVC_PWD);
  
      bool isSuccess = LogonUser(
          @"my_svc_acct",
          "my.domain.net",
          password,
          LOGON32_LOGON_NEW_CREDENTIALS,
          LOGON32_PROVIDER_DEFAULT, ref token
      );
  </code></pre>
  
  <p>Why would this cause the site to break?</p>