CODEWITHSUNDEEP
iis-10
Tim
Tim

Reputation: 8919

401 error: unable to access start page of IIS website with accessType="Allow" users="?"

Anonymous Authentication is enabled on the Authentication dialog and IIS_IUSRS have read & execute on the website folder, but I'm unable to access website with the web.config shown below. When I type http://servername I get the following error:

401 - Unauthorized: Access is denied due to invalid credentials.

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
        <security>
            <authorization>
                <remove users="*" roles="" verbs="" />
                <add accessType="Allow" users="?" />
                 
            </authorization>
        </security>
    </system.webServer>
</configuration>

I had added an application beneath the website and set up a role-based authorization for it using a AD Security Group, but I've since removed that application.

Upvotes: 1

Views: 567

Answers (1)

Abraham Qian
Abraham Qian

Reputation: 7522

As you know, * means all users and ? means anonymous users. the above section allows anonymous users to allow the website, in other words, there are no authenticated rules for anonymous users. On my side, the website with Anonymous Authentcation mode enabled and with the above settings works properly. I doubt if there is a local cache in your browser or some problem with the website project.
enter image description here
Please confirm the issue by applying the configuration in the default IIS website.
Feel free to let me know if there is anything I can help with.

Upvotes: 2

Related Questions