HTTP 401.3 - Access denied by ACL on resource

Hi

I have recently installed IIS 5.1 on Windows XP Pro SP2, using the O/S
installation disk. I'm using an administrator account and I am familiar
with setting up IIS on Windows 2000. However on the machine I am setting
up my local site on I get this error when I go to http://localhost/


You are not authorized to view this page
You do not have permission to view this directory or page using the
credentials you supplied.

Please try the following:

* Click the Refresh button to try again with different credentials.
* If you believe you should be able to view this directory or page,
please contact the Web site administrator by using the e-mail address or
phone number listed on the localhost home page.

HTTP 401.3 - Access denied by ACL on resource
Internet Information Services

Technical Information (for support personnel)

* More information:
Microsoft Support


There are no errors in the application, security or system event logs
and the relevant home directory has web sharing on

When I go here, I get content.
http://localhost/iishelp/iis/misc/default.asp

However, this is going via the virtual folder on the default site.
Trying to access other content on the default site produces the error. I
have set up a default document in IIS to match the index.html for the
site and I can see the index.html from within the IIS console.

Anonymous access is enabled via the local iusr account, IIS is
controlling the password and I'm using blank host headers on the default
website.

The site works when I move it out of "My Documents" and into the "Shared
Documents" folder. However, my questions are:
Why does the site not work when it is under the "my documents" for my
account? (and yet the virtual folders which are not under "my documents"
work already)
Is it possible to run different sites with different home directories
(e.g. a development site and a test site ?


Can anyone help me with this please?

thanks

--
Craig Cockburn ("coburn"). http://www.SiliconGlen.com/
Home to the first online guide to Scotland, founded 1994.
Scottish FAQ, weddings, website design, stop spam and more!
Craig Cockburn [ So, 04 Dezember 2005 00:55 ] [ ID #1087150 ]

Re: HTTP 401.3 - Access denied by ACL on resource

The clue to your problem is "My Documents"

It all comes down to security.

Although you may be logged on as a member of the Local Administrators group
the web server in this case is running as the IUSR_ComputerName account to
access the content on the site.

This means that the IUSR_Computer name requires access to the files where
your web site is configured to house them.

For example:

Say you are logged on as a Domain user called John in the domain XYZ and
JOHN is a member of the local administrators group.

John has this path by default (or something like this)

c:\documents and settings\John\My Documents

You will notice if you browse to this folder that the IUSR_ account does not
have any access to this folder.

Now - DO NOT CHANGE PERMISSIONS USING THE GUI!!!!!!!

the GUI will only REPLACE permissions not edit them - very dangerous - and a
stupid feature that Microsoft could fix with almost no work!

Now I do not know why you want the web site to get its content from your
profile and I would not condone this but if you want it to work do this:

Open a CMD.EXE shell by entering CMD.EXE into the Start-Run dialog.

Type in (change path as required)

cd c:\documents and settings\John\My Documents

type in the following changing DOMAIN\USER to your account, and then hit
enter.

cacls . /e /c /t /g DOMAIN\USER:C

This command will do the following.

The "." means current directory
the /e means EDIT
the /c means CONTINUE on errors
the /t means do Sub Directories
the /g means GRANT the following user the ":C" Change permission.

After this you will be able to browse your web site....

Remember this is not the right area to place your Web Content - hence the
c:\inetpub\wwwroot is already configured with the correct permissions.

--

Cheers

Chris Crowe [IIS MVP 1997 -> 2006]
http://blog.crowe.co.nz
------------------------------------------------


"Craig Cockburn" <craig [at] siliconglen.com> wrote in message
news:ZBAEFSDsBjkDFwFG [at] siliconglen.com...
> Hi
>
> I have recently installed IIS 5.1 on Windows XP Pro SP2, using the O/S
> installation disk. I'm using an administrator account and I am familiar
> with setting up IIS on Windows 2000. However on the machine I am setting
> up my local site on I get this error when I go to http://localhost/
>
>
> You are not authorized to view this page
> You do not have permission to view this directory or page using the
> credentials you supplied.
>
> Please try the following:
>
> * Click the Refresh button to try again with different credentials.
> * If you believe you should be able to view this directory or page,
> please contact the Web site administrator by using the e-mail address or
> phone number listed on the localhost home page.
>
> HTTP 401.3 - Access denied by ACL on resource
> Internet Information Services
>
> Technical Information (for support personnel)
>
> * More information:
> Microsoft Support
>
>
> There are no errors in the application, security or system event logs and
> the relevant home directory has web sharing on
>
> When I go here, I get content.
> http://localhost/iishelp/iis/misc/default.asp
>
> However, this is going via the virtual folder on the default site. Trying
> to access other content on the default site produces the error. I have set
> up a default document in IIS to match the index.html for the site and I
> can see the index.html from within the IIS console.
>
> Anonymous access is enabled via the local iusr account, IIS is controlling
> the password and I'm using blank host headers on the default website.
>
> The site works when I move it out of "My Documents" and into the "Shared
> Documents" folder. However, my questions are:
> Why does the site not work when it is under the "my documents" for my
> account? (and yet the virtual folders which are not under "my documents"
> work already)
> Is it possible to run different sites with different home directories
> (e.g. a development site and a test site ?
>
>
> Can anyone help me with this please?
>
> thanks
>
> --
> Craig Cockburn ("coburn"). http://www.SiliconGlen.com/
> Home to the first online guide to Scotland, founded 1994.
> Scottish FAQ, weddings, website design, stop spam and more!
IISMVP2005 [ So, 04 Dezember 2005 07:45 ] [ ID #1087158 ]

Re: HTTP 401.3 - Access denied by ACL on resource

In message <#f#yN5J#FHA.3980 [at] TK2MSFTNGP14.phx.gbl>, "Chris Crowe [MVP
1997 -> 2006]" <IISMVP2005 [at] iisfaq.homeip.net> writes
>The clue to your problem is "My Documents"
>
>It all comes down to security.
>
>
ok, thanks


--
Craig Cockburn ("coburn"). http://www.SiliconGlen.com/
Home to the first online guide to Scotland, founded 1994.
Scottish FAQ, weddings, website design, stop spam and more!
Craig Cockburn [ So, 04 Dezember 2005 09:20 ] [ ID #1087168 ]

Re: HTTP 401.3 - Access denied by ACL on resource

In message <ZBAEFSDsBjkDFwFG [at] siliconglen.com>, Craig Cockburn
<craig [at] siliconglen.com> writes

this was the other part of my question
>Is it possible to run different sites with different home directories
>(e.g. a development site and a test site ?
>
I can do this under my usual set up on Windows 2000 server - what do I
need to be able to do this under XP Pro?

thanks

--
Craig Cockburn ("coburn"). http://www.SiliconGlen.com/
Home to the first online guide to Scotland, founded 1994.
Scottish FAQ, weddings, website design, stop spam and more!
Craig Cockburn [ So, 04 Dezember 2005 09:52 ] [ ID #1087171 ]

Re: HTTP 401.3 - Access denied by ACL on resource

Hello,

This article should answer this question:


"Multiple websites on Windows XP Professional"
http://www.gafvert.info/notes/MultipleWebsitesXP.htm

--
Regards,
Kristofer Gafvert
http://www.gafvert.info/iis/ - IIS Related Info


Craig Cockburn wrote:

>In message <ZBAEFSDsBjkDFwFG [at] siliconglen.com>, Craig Cockburn
><craig [at] siliconglen.com> writes
>
>this was the other part of my question
>>Is it possible to run different sites with different home directories
>>(e.g. a development site and a test site ?
>>
>I can do this under my usual set up on Windows 2000 server - what do I
>need to be able to do this under XP Pro?
>
>thanks
Kristofer Gafvert [ So, 04 Dezember 2005 11:55 ] [ ID #1087173 ]

Re: HTTP 401.3 - Access denied by ACL on resource

In message <xn0eal88ybld0i7008 [at] news.microsoft.com>, Kristofer Gafvert
<kgafvert [at] NEWSilopia.com> writes
>Hello,
>
>This article should answer this question:
>
>
>"Multiple websites on Windows XP Professional"
>http://www.gafvert.info/notes/MultipleWebsitesXP.htm
>
What a bizarre restriction. I think I'll go back to Tomcat!

--
Craig Cockburn ("coburn"). http://www.SiliconGlen.com/
Home to the first online guide to Scotland, founded 1994.
Scottish FAQ, weddings, website design, stop spam and more!
Craig Cockburn [ So, 04 Dezember 2005 21:45 ] [ ID #1087191 ]

Re: HTTP 401.3 - Access denied by ACL on resource

Yeah, the restriction is a bit bizarre. I think the original initiators 5+
years ago never thought of normal users. That is all going away in the
future with IIS7 but for the meantime, WXP Professional and W2K Professional
unfortunately remains like that.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Craig Cockburn" <craig [at] siliconglen.com> wrote in message
news:TAJpUbB5V1kDFwkE [at] siliconglen.com...
In message <xn0eal88ybld0i7008 [at] news.microsoft.com>, Kristofer Gafvert
<kgafvert [at] NEWSilopia.com> writes
>Hello,
>
>This article should answer this question:
>
>
>"Multiple websites on Windows XP Professional"
>http://www.gafvert.info/notes/MultipleWebsitesXP.htm
>
What a bizarre restriction. I think I'll go back to Tomcat!

--
Craig Cockburn ("coburn"). http://www.SiliconGlen.com/
Home to the first online guide to Scotland, founded 1994.
Scottish FAQ, weddings, website design, stop spam and more!
someone [ Mo, 05 Dezember 2005 06:19 ] [ ID #1088559 ]
Webserver » microsoft.public.inetserver.iis » HTTP 401.3 - Access denied by ACL on resource

Vorheriges Thema: can't display web site properties page
Nächstes Thema: How to disable the "My Site" in sharepoint?