IIS 7 and Above
LocalHost denied with IIS_IUSRS set correctly
Last post Nov 08, 2018 06:00 AM by andrewcw
Nov 07, 2018 09:40 PM|andrewcw|LINK
Using a WIndows Server 2016 VM
If I select Edit Permissions / Security from right mouse click on Default Web Site - I see
IIS_IUSRS (MYVMNAME\IIS_IUSRS ) with
these 3 allow(checked) on Read & Execute, List folder contents & List folder
When I select Default web Site from the IIS manager and then browse *:80 (http) or localhost
I get Access is denied.
An error occurred while accessing the resources required to serve this request. You might not have permission to view the requested resources.
Error message 401.3: You do not have permission to view this directory or page using the credentials you supplied (access denied due to Access Control Lists). Ask the Web server's administrator to give you access to 'C:\inetpub\wwwroot'.
I changed the web.config at wwroot to <identity impersonate="false" />
but still nothing.
How can this be - that the IIS_IUSRS can have permission and yet be denied. What other user can it be ??
Help please !!! Thanks
Nov 08, 2018 05:06 AM|Brando Zhang|LINK
According to your description, I suggest you could firstly check you have already enable the anonymous authentication firstly.
Then I suggest you could check the anonymous's user identity is the IUSER.
Like below image:
If this still doesn't work, I suggest you could try to set the anonymous's user identity to application pool to avoid this error.
Nov 08, 2018 05:46 AM|andrewcw|LINK
Anonymous user identity was enabled & the specific user was set to IUSR
I did try per your suggestion switching to Application Pool Identity
That made LocalHost show the IIS welcome page
And when I tried LocalHost\TestPage.Html it did load
I noticed if I try and go back to IUSR I am asked to set a password I left it blank created a new test page and it did not load.
So I switched it back to application pool identity.
I have an asp.net core sample application ( default ) and I designated it as an application - but that didn't load
I could add IUSR but I am concerned that other folders may need new permissions , I don't know what user is Application Pool Identity & what to do for more that simple pages located off the INETPUB\wwwroot path. Ideas ??
Nov 08, 2018 05:53 AM|andrewcw|LINK
I read that the application pool identity is usually Network Service and I added that to my folder where the CoreTest application was placed -- a new permission error - but its core 2.1 and the error looks like standard framework - so maybe the asp.net core
2.1 is messed over.
An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately.
Parser Error Message: An error occurred loading a configuration file: Failed to start monitoring changes to 'C:\WApp1\CoreWebAppTest' because access is denied.
[No relevant source lines]
Source File: C:\WApp1\CoreWebAppTest\web.config Line:
Version Information: Microsoft .NET Framework Version:4.0.30319; ASP.NET Version:4.7.3163.0
Nov 08, 2018 06:00 AM|andrewcw|LINK
My ,NET Framework Apps are now loading - from off the site. So my .NET CORE is perhaps another issue
Thanks so much Brando Zhang !