Link to home
Start Free TrialLog in
Avatar of IT_Service
IT_ServiceFlag for Canada

asked on

iis 401 error

I have an application running on a Windows 2008 R2 server in IIS.

The web portal has an "Admin options" link at the login screen where I edit the SQL backend database settings.

When I click the link it's prompting me for Windows Authentication. I cannot seem to get past this part as it always results in the following error:

"Server Error - 401 - Unauthorized: Access is denied due to invalid credentials. You do not have permission to view this directory or page using the credentials that you supplied"

I am using the domain admin account (which is the only account that was used in setting up the application).

I have checked the security settings on the files and directories themselves in Windows Explorer and in IIS and they all show that Administrators have Full Control. I also tried using the local Aministrator account of the server, but that also results in the same error.

The link in question is trying to access a folder called "Admin". In IIS, the Athentication setting shows everything disabled except for Windows Authentication.

Can someone suggest how I can troubleshoot this?

Thanks,
Paul
Avatar of arnold
arnold
Flag of United States of America image

This means that within the IIS site security section configuration you do not allow anonymous login , basic, digest only NTLM is enabled! the browser that connects does not support the mechanism of your choice.
This issue is one because NTLM/window authentication only supported within trusted locations.  In the browser you are testing, add this site to the trusted list and see it work provided the credentials of the user logged in are valid on the IIS.
Avatar of IT_Service

ASKER

I added the site to trusted sites, restarted IIS and the browser too.

I tried to log in again, but still the same error.

I have a work around - just disabling Windows Authentication and enabling Anonymous, then changing the settings and then setting it back to Windows Authentication.

It would be great to find the solution though.
Are the two system on the same AD?
http://technet.microsoft.com/en-us/library/cc733010(v=ws.10).aspx
Covers the different auth methods and their dependencies.
try basic instead of windows.
The asker seems to want transparent authentication where the user is not involved.
I'm not sure what you mean by "the two systems".

The web sever is a member server on the domain. I don't want users to be able to access the "admin options" page. I don't really care if it uses Windows authentication, but I would like it to use some kind of authentication.
ASKER CERTIFIED SOLUTION
Avatar of arnold
arnold
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial