?
Solved

IIS Site Error - You are not authorized to view this page

Posted on 2011-02-28
5
Medium Priority
?
1,055 Views
Last Modified: 2012-05-11
Points of my scenario:
1. I am admin of a Windows Server 2003 domain.
2. I have successfully implemented MS Network Load Balancing for two IIS member servers.
3. Anonymous logon is enabled using the default "IUSR_<machine name>" account.
4. I removed NLB from the two servers and changed both their hostnames.
5. Since the change in point #4, whenever I attempt to access website on any of the two servers, I get the error "You are not authorized to view this page".
QUESTION: How can I resolve this error to view my websites again?
0
Comment
Question by:waforbes100
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 21

Assisted Solution

by:snusgubben
snusgubben earned 1000 total points
ID: 35004752
When you changed the hostnames, did you verify that "IUSR_hostname" reflects the new hostname?

If you open IIS manager, right click the site, Browse. Same error?

Do you see any errors in the IIS log? (you'll find the path to the log on the General tab on the site)
0
 
LVL 15

Accepted Solution

by:
vahiid earned 1000 total points
ID: 35004891
Try to reset/synchronize IUSR_servername & IWAM_servername passwords in IIS: http://www.howtonetworking.com/internet/resetpassword.htm
0
 

Author Comment

by:waforbes100
ID: 35007787
To snusgubben: (1) The IUSR_hostname does NOT reflect the new hostname: it retains the original hostname. (2) In IIS Manager, r-clicking the site & choosing "Browse" yields the same error. (3) The IIS logs contain cryptic language - nothing from which a cause can be deciphered.
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 35007905
Did you try to change the IUSR_<hostname> to reflect the new account for anonymous logons?

("iisreset" if you change)

0
 

Author Comment

by:waforbes100
ID: 35008783
All: I found the problem - the following policy was configured to include the local Guests group account: "Deny access to this computer from the network." The IUSR_hostname account is a member of the BUILin\Guests group.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

649 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question