Home All Groups Group Topic Archive Search About

How to solve Error message 401.2 in IIS 5.1?

Author
4 May 2009 7:28 AM
Peter
I get the following error when I hit the Browse menu item of Default.aspx of
a IIS 5.1 Virtual Directory.   If the File Security of the Default.aspx or
the Directory Security of the Virtual Directory is changed to Integrated
Windows Authentication from Anonymous Access, I won't get the error.   Is
there any tools that I can use to trace this type of error and any log file
for more information?

Server Error in '/SQL Web Data Administrator' Application. --------------------------------------------------------------------------------

Access is denied.
Description: An error occurred while accessing the resources required to
serve this request. The server may not be configured for access to the
requested URL.

Error message 401.2.: Unauthorized: Logon failed due to server
configuration.  Verify that you have permission to view this directory or
page based on the credentials you supplied and the authentication methods
enabled on the Web server.  Contact the Web server's administrator for
additional assistance.

--------------------------------------------------------------------------------
Version Information: Microsoft .NET Framework Version:2.0.50727.3053;
ASP.NET Version:2.0.50727.3053

Author
4 May 2009 11:29 PM
Roberto Franceschetti
If your .NET application is accessing a SQL database, check to see what
authentication method is used by the .NET pages to authenticate to the
database. Without seing your app's code it's hard to find the exact
issue, but chances are that, if using anonymous access in IIS, you will
need to supply a specific SQL account or a specific Active Directory
account to allow the .NET app to access the database.

--
Roberto Franceschetti
LogSat Software
http://www.logsat.com

Peter wrote:
Show quoteHide quote
> I get the following error when I hit the Browse menu item of Default.aspx of
> a IIS 5.1 Virtual Directory.   If the File Security of the Default.aspx or
> the Directory Security of the Virtual Directory is changed to Integrated
> Windows Authentication from Anonymous Access, I won't get the error.   Is
> there any tools that I can use to trace this type of error and any log file
> for more information?
>
> Server Error in '/SQL Web Data Administrator' Application.
> --------------------------------------------------------------------------------
>
> Access is denied.
> Description: An error occurred while accessing the resources required to
> serve this request. The server may not be configured for access to the
> requested URL.
>
> Error message 401.2.: Unauthorized: Logon failed due to server
> configuration.  Verify that you have permission to view this directory or
> page based on the credentials you supplied and the authentication methods
> enabled on the Web server.  Contact the Web server's administrator for
> additional assistance.
>
>
> --------------------------------------------------------------------------------
> Version Information: Microsoft .NET Framework Version:2.0.50727.3053;
> ASP.NET Version:2.0.50727.3053
Author
5 May 2009 2:19 AM
Peter
Hi Roberto,

For this case, I don't think it is related to access any SQL database since
no SQL Server instance has been specified yet.  I'm thinking the security
issue may be related to some common folders/files/registries which are always
required by asp.net and IIS but I'm just guessing since I don't know too much
about asp.net and IIS.


Show quoteHide quote
"Roberto Franceschetti" wrote:

> If your .NET application is accessing a SQL database, check to see what
> authentication method is used by the .NET pages to authenticate to the
> database. Without seing your app's code it's hard to find the exact
> issue, but chances are that, if using anonymous access in IIS, you will
> need to supply a specific SQL account or a specific Active Directory
> account to allow the .NET app to access the database.
>
> --
> Roberto Franceschetti
> LogSat Software
> http://www.logsat.com
>
> Peter wrote:
> > I get the following error when I hit the Browse menu item of Default.aspx of
> > a IIS 5.1 Virtual Directory.   If the File Security of the Default.aspx or
> > the Directory Security of the Virtual Directory is changed to Integrated
> > Windows Authentication from Anonymous Access, I won't get the error.   Is
> > there any tools that I can use to trace this type of error and any log file
> > for more information?
> >
> > Server Error in '/SQL Web Data Administrator' Application.
> > --------------------------------------------------------------------------------
> >
> > Access is denied.
> > Description: An error occurred while accessing the resources required to
> > serve this request. The server may not be configured for access to the
> > requested URL.
> >
> > Error message 401.2.: Unauthorized: Logon failed due to server
> > configuration.  Verify that you have permission to view this directory or
> > page based on the credentials you supplied and the authentication methods
> > enabled on the Web server.  Contact the Web server's administrator for
> > additional assistance.
> >
> >
> > --------------------------------------------------------------------------------
> > Version Information: Microsoft .NET Framework Version:2.0.50727.3053;
> > ASP.NET Version:2.0.50727.3053
>
Author
10 May 2009 4:24 PM
Roberto Franceschetti
To check for security access failures, you can proceed as follow.

First enable the auditing policies for failures:
Goto Administrative Tools - Local Security Policy, then to to "Local
Policies - Audit Policy". For the "Audit logon events" and "Audit object
access", go to their properties and check "Define these policy settings"
and then "Failure". (I would recommend selecting the Failure option for
all the entries in the Audit Policy).


Then enable auditing on the File System:
In Windows Explorer, for each local drive on the system, right-click on
the drive icon, properties, Security tab, then "Advanced" button. In the
security settings window, go to the "Auditing" tab, click on "Add",
select the "EVERYONE" user, and select all of the "Failed" checkboxes
for the auditing, and apply to "This folder, subfolder and files".

You can also enable similar settings in the registry for the HKLM.

From here on, you will see all failed file/reistry access in the event
logs.
You could also use SysInternal's utilities for filemon and regmon while
you replicate the problem to see the failures, but I find the above
permanent solution I described more simple and practical.

As a side-note, the "SQL Server Web Data Administrator" is probably
Microsoft's utility that allows you to manage SQL and MSDE databases,
which don't need to be local but could reside on other servers.

--
Roberto Franceschetti
LogSat Software
http://www.logsat.com


Peter wrote:
Show quoteHide quote
> Hi Roberto,
>
> For this case, I don't think it is related to access any SQL database since
> no SQL Server instance has been specified yet.  I'm thinking the security
> issue may be related to some common folders/files/registries which are always
> required by asp.net and IIS but I'm just guessing since I don't know too much
> about asp.net and IIS.
>
>
> "Roberto Franceschetti" wrote:
>
>> If your .NET application is accessing a SQL database, check to see what
>> authentication method is used by the .NET pages to authenticate to the
>> database. Without seing your app's code it's hard to find the exact
>> issue, but chances are that, if using anonymous access in IIS, you will
>> need to supply a specific SQL account or a specific Active Directory
>> account to allow the .NET app to access the database.
>>
>> --
>> Roberto Franceschetti
>> LogSat Software
>> http://www.logsat.com
>>
>> Peter wrote:
>>> I get the following error when I hit the Browse menu item of Default.aspx of
>>> a IIS 5.1 Virtual Directory.   If the File Security of the Default.aspx or
>>> the Directory Security of the Virtual Directory is changed to Integrated
>>> Windows Authentication from Anonymous Access, I won't get the error.   Is
>>> there any tools that I can use to trace this type of error and any log file
>>> for more information?
>>>
>>> Server Error in '/SQL Web Data Administrator' Application.
>>> --------------------------------------------------------------------------------
>>>
>>> Access is denied.
>>> Description: An error occurred while accessing the resources required to
>>> serve this request. The server may not be configured for access to the
>>> requested URL.
>>>
>>> Error message 401.2.: Unauthorized: Logon failed due to server
>>> configuration.  Verify that you have permission to view this directory or
>>> page based on the credentials you supplied and the authentication methods
>>> enabled on the Web server.  Contact the Web server's administrator for
>>> additional assistance.
>>>
>>>
>>> --------------------------------------------------------------------------------
>>> Version Information: Microsoft .NET Framework Version:2.0.50727.3053;
>>> ASP.NET Version:2.0.50727.3053