Question

I have developed an ASP.Net 2.0 website (Using VS 2008). The website uses sqlmembershipprovider and authentication mode = "Forms".

When i deploy the site on my IIS 6 (Windows server 2003 R2) and try to browse the .aspx files it gives

"The webpage cannot be found HTTP 404" 

and when i browse .html file in the same directory it gives

"You are not authorized to view this page You do not have permission to view this directory or page using the credentials that you supplied." 

I have given rights to almost every possible user on wwwroot folder and the website folder
1. asp.net machine account (full control)
2. IIS_WPG (Read & Execute, List Folder contents, Read)
3. Internet Guest Account (IUSR_MachineName) (Full control)
4. Network Service (Read & Execute, List Folder contents, Read)
5. System (Full cotnrol)
6. Users (Read & Execute, List Folder contents, Read)

ASP.NET v2.0.50727 web service extensions are also allowed. In the directory security(authentication and access control) of my website i have only selected integrated windows authentication. default application pool is selected which has “network service” as application pool identity..

I am badly stuck and will be very grateful to you guys for helping me out…

PS: I have searched a lot about my problem but couldn’t find a working solution 🙁

Answer 1

I think you set security settings wrong.

• If you only set Integrated Windows authentication in IIS then you should set your authentication method to Windows in your ASP.NET web app.

  <authentication mode="Windows">

• If you want to use Forms authentication then you should Enable anonymous access in IIS and should not check Integrated Windows authentication. On MSDN you can see this:

Because forms authentication does not rely on IIS authentication, you should configure anonymous access for your application in IIS if you intend to use forms authentication in your ASP.NET application.