Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a site which fails to authenticate using windows authentication now it has moved to IIS 7.5.

The site is:

On a UNC share Using windows authentication Has a custom app pool Id (domain account) IIS 7.5

Everything runs fine if it is not on a UNC share. This site used to run fine on the previous IIS 7 server with all the same settings apart from being on a UNC share.

I have set the unc with caspol to be:

1.6. Url - file://\fileserver\websites*: FullTrust (Exclusive)

The app pool identity has all the right privileges and is used to run app pools which have no windows authorisation but use forms auth instead, and these work fine on UNC shares.

Please if anyone has any ideas it would be great to hear them.

Thanks in advance.

share|improve this question
up vote 0 down vote accepted

OK so I have found the solution:

The IIS Server needed delegation permissions to be set in AD.

See this article on MSDN:

share|improve this answer
I know this is old, but where excactly does the Microsoft article talk about delegation permissions? The article is HUGE and outdated (2005), so please provide an excact solution – spankmaster79 Apr 15 '15 at 9:11

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.