Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Normally when setting up IIS 7, I'm used to allowing permissions to user IIS APPPOOL\{application pool name} on the root folder of my web application(s). I also give permissions to IUSR (or the IIS_IUSRS user group. (Note, in Windows Server 2008, I found that IUSR isn't in that group by default, so I added it).

In Windows Server 2008, I cannot find user IIS APPPOOL\{application pool name} under Security under the Windows Folder Properties. I'm using Windows Authentication in ASP.NET. I'm receiving a 401.1 on the page in Internet Explorer 8 after getting the authentication prompt. Mozilla Firefox also gave me a Windows authentication prompt, and got me into the site fine. Same with Google Chrome.

How can I solve this one?

HTTP Error 401.1 - Unauthorized You do not have permission to view this directory or page using the credentials that you supplied.

Specific page information:

Module: WindowsAuthenticationModule 
Notification: AuthenticateRequest 
Handler: PageHandlerFactory-ISAPI-4.0_32bit 
Error Code: 0x8009030e 
Requested URL: http://.....aspx 
Physical Path: C:\.........aspx 
Logon Method: Not yet determined 
Logon User: Not yet determined 
share|improve this question
    
making a note of this article: iis.net/learn/manage/configuring-security/… –  MacGyver Sep 20 '12 at 11:11
    
and this: serverfault.com/questions/100516/… –  MacGyver Sep 20 '12 at 11:15
    
    
forums.iis.net/t/1036880.aspx –  MacGyver Sep 20 '12 at 11:38

1 Answer 1

This is most likely because IE will use your authenticated credentials rather than the anonymous user account. If your authenticated user doesn't have access then it will fail. One solution is to add your authenticated user to the site's root folder. With IE your credentials that you're using on the network will pass through to the site, but with the other browsers it will ask for a fresh set of credentials.

Your link in the 3rd comment sounds like a good lead. Did you try turning off Negotiate and seeing what happens? Changing the trusted and intranet zones in the 4th link is a good idea too.

btw, In Windows Server 2008 the IIS_IUSRS is taken care of virtually on the fly, so adding IUSRS doesn't hurt anything, but it's not needed either.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.