Symptoms You can load the page just fine, but after going through the pages quickly or by opening several tabs at once, you see a 403 error: 403 - Forbidden: Access is denied. You do not have permission to view this directory or page using the credentials that you supplied. This is a bit misleading since you might right away think that the you do not have permission to access … [Read more...]

Typically, web application is run using ApplicationPoolIdentity on IIS. However, for various reasons, it's very common to find large corporations use service accounts to run the application pools. Sometimes the challenge comes when you need to move the website to a different server and you're not given the proper credential to set it up on the new environment. What's worse, it's also not … [Read more...]

Setting up a website on IIS is very easy to do. However, it can get very tedious when we have migrate multiple websites from one server to another. For a new server, the easiest to migrate all those settings of course is to clone the server and then we can reconfigure the IP addresses for each web instance from IIS on the new server. But what if that option is not possible? In this post, we'll … [Read more...]

Continuing from the last post on customizing 401 error page on IIS, there's a different way to do so by using 302 Redirection. Using this method is actually a bit more simple to do, it's just that you have to create a second website with a landing page to serve as your error page. Not everyone has this privilege to just have a second instance created in production environment, so it's always … [Read more...]

When you need to restrict access to your web application on IIS, any unauthorized users will see the standard 401 Error Page from IIS: Often times, though, you want to show your end users a custom error page with specific instructions on what to do. That is certainly a more graceful way of handling the error than just showing the standard windows 401 error page. If you have the … [Read more...]