ASP pages in IIS using Localhost 401.3 Error do not have permission

Question

I have just installed the IIS so I can view asp files in a browser but when I put the address in a browser as : http://localhost/index.asp I get an error.

The error shows this:

HTTP Error 401.3 - Unauthorized You do not have permission to view this directory or page because of the access control list (ACL) configuration or encryption settings for this resource on the Web server.

I really need to get this sorted out, I would highly appreciate any advice on this.

Did you look at the permissions of the file? http://support.microsoft.com/default.aspx?scid=kb;EN-US;942042 — Damon Bauer, Nov 22 '11 at 19:59
No doubt the permissions on your webroot, IIRC adding IUSR account will sort the problem out. — Phil Parsons, Nov 22 '11 at 19:59
@motoxer4533 - I have opened the security tab on the file and it shows that I have full control. — Sam, Nov 22 '11 at 20:17
@motoxer4533 I have added the user with full control but this still shows the same error. — Sam, Nov 22 '11 at 20:33
@motoxer4533 Seriously? - adding everyone will full control is not a fix and depending on security setup possibly downright dangerous! — dan360, Nov 22 '11 at 23:27
@dan360 on localhost, where theres no access to the outside world, does it really matter? — Damon Bauer, Nov 23 '11 at 02:41
Could you please have a look at my answer on [ASP MVC in IIS 7 results in: HTTP Error 403.14 - Forbidden](http://stackoverflow.com/questions/1741439/asp-mvc-in-iis-7-results-in-http-error-403-14-forbidden/41363973#41363973). — Murat Yıldız, Dec 28 '16 at 14:24

score 92 · Answer 1 · answered Mar 07 '14 at 13:52

92

My issue was around the identity used in the app pool. I changed the site's Authentication to "Application pool identity" as well as giving the directory the appropriate permissions.

enter image description here

answered Mar 07 '14 at 13:52

LawMan

3,469
1
29
32

1

This is the right answer! Thanks a lot! I wish I would give you some money! – Rodrigo Reis Aug 17 '16 at 02:21
Thanks! But why?! The default config worked for a while for me, until I rebooted my computer and then I had to apply your fix. – Thibault D. May 12 '17 at 10:44

score 88 · Accepted Answer · edited Aug 31 '15 at 16:18

88

OK, working from memory here as I am not in front of a Windows machine.

If you right click on your webroot folder /inetpub/wwwroot/ or the website directory you are working on open properties and select security, I think it is, you will see the list of users with their permissions for that folder. There is a section to add new users where you can add the IIS_IUSRS account (search from the list of users if you need to) which will be the default user used when anonymous authentication is enabled. Give this account the relevant permissions (read, write, execute) ensuring you apply to file and subfolders. Refresh the website in IIS and you should hopefully be good to go.

edited Aug 31 '15 at 16:18

Daniel Sokolowski

11,982
4
69
55

answered Nov 22 '11 at 21:30

Phil Parsons

2,857
22
15

3

+1 - I had exactly this problem and your solution worked first time. Thanks! – Mark Whitaker Nov 28 '12 at 13:42
11

Just for future reference this works because the IUSR account is responsible for loading static resources. For dynamic resources you need to give permissions to whatever your application pool is running under, usually "NetworkService" – devshorts Apr 12 '13 at 17:46
I had to both add "Forms Authentification" and give rights to "Everone " on the directory. – JanBorup Feb 25 '14 at 12:54
22

I had to give permission to IUSR instead of IIS_USRS – Dipendu Paul Feb 26 '16 at 10:43
As in LawMan's answer, the user for me is IUSR. So I added IUSR as Dipendu Paul said and then it worked. Since I tried other things also it is not clear that adding permission for IUSR is everything that is necessary but at least I have an explanation for why adding permission for IUSR might be necessary. This is for a personal IIS that I set up just now in Windows 10. – Sam Hobbs Mar 23 '16 at 01:54
For me, it worked by adding Everyone (obviously it worked) but more specifically it needed IUSR – Fox Jul 25 '16 at 02:02

Chris F Carroll · Answer 3 · 2016-04-11T16:01:03.953

4

I had one folder not working (extracted from a zip file which came from an email from some kind of MS Sharepointy thing. Or something). The files were all marked with Windows Explorer -> Right Click -> Properties -> Advanced -> Encrypt contents to secure data. Unticking cured it.

edited Apr 11 '16 at 16:01

answered Apr 28 '15 at 12:47

Chris F Carroll

11,146
3
53
61

1

not obvious at all, but this is what did it for me. – chaggy Apr 11 '16 at 15:39
I also found that when I publish/deployed these files, they got deployed as encrypted. Even after I'd unencrypted them. – Chris F Carroll Apr 11 '16 at 15:59

score 1 · Answer 4 · answered Mar 21 '17 at 00:41

1

In my case I had created an application in IIS 7 on Windows 7 using "Add Application" on the Default Web Site. I had to add the "users" account from the local machine and that got rid of the permissions error.

answered Mar 21 '17 at 00:41

SonicVader

11
1

score 0 · Answer 5 · answered Jan 25 '13 at 17:59

I had this happen to me and what I needed to do was apparently add a web.config file. Doesn't matter that it was just a PHP site, and that "Everyone" had full control. Until there was a basic Web.config - NO DICE!

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
        <handlers accessPolicy="Read, Execute, Script" />
        <defaultDocument>
            <files>
                <clear />
                <add value="index.php" />
                <add value="Default.htm" />
                <add value="Default.asp" />
                <add value="index.htm" />
                <add value="default.aspx" />
            </files>
        </defaultDocument>
        <directoryBrowse enabled="false" />
    </system.webServer>
</configuration>

score -4 · Answer 6 · answered Oct 29 '13 at 18:51

-4

Here, the set up process is explained in detail. You can follow the steps.

http://coldfusion-tip.blogspot.com/2013/10/you-do-not-have-permission-to-view-this.html

answered Oct 29 '13 at 18:51

Roul

945
1
12
34

ASP pages in IIS using Localhost 401.3 Error do not have permission

6 Answers6

Linked