Home/ Questions/Q 7003767
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-27T21:06:42+00:00

I am building a local intranet web application which uses the current user’s AD

  • 0

I am building a local intranet web application which uses the current user’s AD credentials to access the system. My web server is running IIS 7.5 on Server 2008.

My AD is configured with two groups, Users and Admins, both of which I want to access my web application and I have added the two groups (read/execute permissions) to my directory in IIS. My web.config is pretty standard and I do not have any additional filters in my Global.asax file.

I am able to access my application if I use my user or admin account, but my coworker can not, which further complicates things. My accounts do not have any permissions on the folder – only the groups to which they belong.

Authentication mode is set to Windows, but unfortunately every attempt as my coworker to access the website fails with the following:

HTTP Error 401.0 - Unauthorized
You do not have permission to view this directory or page.

The “most likely cause” box suggests:

The authenticated user does not have access to a resource needed to process the request.

I just can not figure this out. If I create a sample mvc3 application and deploy it in the same directory, I can authenticate and view pages fine as any user.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    There can be many reasons for this.

    1. Your controller needs to be decorated with appropriate authorization attribute like following

      [Authorize(Roles = “Administrator”)]

    2. In your web.config, you need to have following code inside your system.web configuration

      <roleManager enabled="true" defaultProvider="YourRoleProvider">

    3. Finally you need to see if that user has been added to their respective roles

    • 0