Question

I’m having difficulty deploying a web app that has forms authentication to IIS 7.5.

I have the following:

• Forms Authentication
• Asp.net mvc 2
• Net Framework 4.0
• Application Pool is setup for .Net Framework 4.0 and is in Integrated pipeline mode.
• IIS 7.5 on Windows Server 2008
• Authentication setup is IIS (ASP.NET Impersonation and Forms Authentication set to ENABLED. The rest set to DISABLED). Inside the settings for Forms authentication the login URL is correct. The cookie settings is (Mode: Use device profile, Name: .ASPXAUTH, Protection Mode: Encryption and validation, Requires SSL: not checked)

Web.Config:

<authentication mode="Forms">
  <forms loginUrl="~/Account/LogOn" timeout="2880" />
</authentication>

I get the following error when running “Manage Application–>Browse” inside IIS Manager.

---

HTTP Error 401.2 – Unauthorized

You are not authorized to view this page due to invalid authentication headers.

I get the following error when trying to run the deployed app on my local machine:

---

401 – Unauthorized: Access is denied due to invalid credentials.

You do not have permission to view this directory or page using the credentials that you supplied.

Any ideas on what is going wrong? It works find when run from VS.

Answer 1

I got this to work by setting the “Anonymous Authentication” to enabled.

Update: Setting it to Anonymous Authetication has causes other problems. I need to keep this disabled.

Any ideas?