I installed new boxes at the beginning of the week. 1) Web Server on Win2008 x64, IIS 7 + all updates 2) DB Server on Win2008 x64, SQL 2008 Ent + all updates

I configured my websites, set up host headers and DNS entries, worked through some problems on my handlers and finally got it all running Wednesday morning. Our team has been using it since then. This morning I came in and everyone of us is getting a 500 error.

Error Summary
HTTP Error 500.19 - Internal Server Error
The requested page cannot be accessed because the related configuration data for the page is invalid.
Detailed Error Information
Module IIS Web Core
Notification Unknown
Handler Not yet determined
Error Code 0x80070005
Config Error Cannot read configuration file due to insufficient permissions
Config File \?\C:\RivWorks\dev\web.config

Requested URL http://dev.rivworks.com:80/login.aspx

Physical Path
Logon Method Not yet determined
Logon User Not yet determined
Config Source
Links and More InformationThis error occurs when there is a problem reading the configuration file for the Web server or Web application. In some cases, the event logs may contain more information about what caused this error.

I’ve gone through the KB articles, made sure IIS_IUSRS had read permissions and am now stumped. What bothers me is IIS is looking in \?\C:\ instead of just C:. What is happening?


I've gone through and reconfigured everything on my web site. AppPool is using NetworkServices. NetworkServices has been granted R/W permissions on all directories at the web root on down. I've restarted my web site as well as issuing an IISRESET. I am now getting a 401.3 error when I go to the URL with no page (http://dev.rivworks.com/). If I put a page in there - including what is already listed as the default page in IIS settings (http://dev.rivworks.com/default.aspx) - it works but CSS does not render. This is true wether I am directly on the server or on any client machine within our network. I am seriously stumped at the moment.


What changed since the beginning of the week? Does your team consist of programmers actively developing the site you are hosting?

Did you grant IUSRS read permission or was it already there? Did you restart IIS after adding if so?

You could try running the Process Monitor tool, reproduce the error and look for “Access Denied” in the “Result” column. You can then configure the required permissions accordingly.

Does the application pool's user also have read access to C:\RivWorks\dev? You might want to replace the permissions on all child objects within RivWorks\dev after verifying (Folder properties, Security Tab, Advanced)

  • I am using NetworkServices, permissions (Read/Write) were granted to NetworkServices from the web root on down. I did the advanced option to replace permissions on all child objects as well. App Pool is set to use NetworkServices. Website is using correct App Pool. I restarted the web site as well as a full IISRESET. And I am now getting different behavior (see above NOTE) – Keith Barrows May 10 '10 at 16:34
  • Hi Keith, the 401.3 is (again) from a permissions problem. Please have a look at this tutorial on using Process Monitor to diagnose 401.3 errors: blogs.msdn.com/webtopics/archive/2009/06/25/… – iainlbc May 10 '10 at 17:40
  • Got it. Was missing the machine account 'IUSR' :( – Keith Barrows May 10 '10 at 22:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.