We are excited to announce that the IIS.NET Forums are moving to the new Microsoft Q&A experience. Learn more >

403 - Forbidden: Access is denied using IIS 7 from a web browser [Answered]RSS

5 replies

Last post Jan 25, 2012 03:02 PM by ushahv

  • 403 - Forbidden: Access is denied using IIS 7 from a web browser

    Dec 04, 2008 05:53 PM|clindsay|LINK

    Hi All,


    I am using a win 2008 server with IIS 7 to host a php web site for the first time.  

    The server is part of a domain but not a DC only a Web Server.  I am using port 81 as a test port which is reflected in the website config.

    I can telnet the external dns with the port number.  seems OK

    I have added the various web extentions and I can browse the website from IIS from the server but cannot access the site through a PC browser on the same network using the dns resolution or an ip address with the port 81 as a suffix.

    I have tried creating a new Anonymous user and tested the access :

    The specified user credentials are authorized to access the specified physical path.

    *******

    From the browser I obtain the message :

    403 - Forbidden: Access is denied

    I have summarised the log. %SystemDrive%\inetpub\logs\FailedReqLogFiles

    Url http://www.xxxxx.com:81
    App Pool ReportServer$MS$DPM2007$
    Authentication anonymous
    User from token LO-BACKUP\IUSER_LO-DC2
    Activity ID {00000000-0000-0000-0C00-0080000000F8}

    68. view trace Warning -MODULE_SET_RESPONSE_ERROR_STATUS  <div style="DISPLAY: block" id=section_errors_68_details class=hidden>
    ModuleName IIS Web Core
    Notification 16
    HttpStatus 403
    HttpReason Forbidden
    HttpSubStatus 2
    ErrorCode 2147942405
    ConfigExceptionInfo
    Notification MAP_REQUEST_HANDLER
    ErrorCode Access is denied. (0x80070005)
    </div>
    IIS Web Core
    69. view trace Warning -SECURITY_DENIED_BY_ACCESS_FLAGS  <div style="DISPLAY: block" id=section_errors_69_details class=hidden>
    CurrentFlags 30215
    NeededFlags 1
    </div>

    Any help would be greatly appresiated as I am tearing my hair out.

     Thank you in advance

    Anonymous access access denied

  • Re: 403 - Forbidden: Access is denied using IIS 7 from a web browser

    Dec 04, 2008 06:46 PM|anilr|LINK

    This is because you have set the NoRemoteRead flag in the system.webServer/handlers/accessPolicy flag - you also seem to have the NoRemoteExecute and NoRemoteScript flags set.

    Anil Ruia
    Software Design Engineer
    IIS Core Server
  • Re: 403 - Forbidden: Access is denied using IIS 7 from a web browser

    Dec 05, 2008 03:41 AM|clindsay|LINK

    Hi Anilr,

    Thanks for the response, it is much appreciated

    Where do I configure the NoRemoteRead flag, NoRemoteExecute and NoRemoteScript flags set in the config file?

    Once again Thanks

     

    <?xml version="1.0" encoding="UTF-8"?>
    <configuration>
        <system.webServer>
            <directoryBrowse enabled="true" showFlags="Date, Time, Size, Extension, LongDate" />
      

            <security>
                <authorization>
                    <remove users="*" roles="" verbs="" />
                    <add accessType="Allow" users="?" />
                </authorization>
            </security>
            <defaultDocument enabled="false">
                <files>
                    <remove value="default.aspx" />
                    <remove value="iisstart.htm" />
                    <remove value="index.htm" />
                    <remove value="Default.asp" />
                    <remove value="Default.htm" />
                </files>
            </defaultDocument>
            <tracing>
                <traceFailedRequests>
                    <add path="*">
                        <traceAreas>
                            <add provider="ASP" verbosity="Verbose" />
                            <add provider="ASPNET" areas="Infrastructure,Module,Page,AppServices" verbosity="Verbose" />
                            <add provider="ISAPI Extension" verbosity="Verbose" />
                            <add provider="WWW Server" areas="Authentication,Security,Filter,StaticFile,CGI,Compression,Cache,RequestNotifications,Module" verbosity="Verbose" />
                        </traceAreas>
                        <failureDefinitions statusCodes="403" />
                    </add>
                </traceFailedRequests>
            </tracing>
        </system.webServer>
        <system.web>
            <identity impersonate="true" />
            <authentication mode="windows" />
            <trust level="High" />
        </system.web>
        <connectionStrings>
            <remove name="LocalSqlServer" />
        </connectionStrings>
    </configuration>

  • Re: 403 - Forbidden: Access is denied using IIS 7 from a web browser

    Dec 10, 2008 05:54 PM|anilr|LINK

    You must have set it in applicationhost.config

    Anil Ruia
    Software Design Engineer
    IIS Core Server
  • Re: 403 - Forbidden: Access is denied using IIS 7 from a web browser

    Sep 28, 2011 09:00 AM|amarnathsahu|LINK

    anilr

    You must have set it in applicationhost.config

    Thanks man. Saved me a lot of time.

  • Re: 403 - Forbidden: Access is denied using IIS 7 from a web browser

    Jan 25, 2012 03:02 PM|ushahv|LINK

    Can you please send a sample code for adding handler tags to applicationhost.config file. Thanks in advance.