{"id":2954,"date":"2013-01-02T05:37:05","date_gmt":"2013-01-02T12:37:05","guid":{"rendered":"http:\/\/sanuja.com\/blog\/?p=2954"},"modified":"2021-01-03T14:23:58","modified_gmt":"2021-01-03T21:23:58","slug":"resolving-iis-403-forbidden-access-is-denied","status":"publish","type":"post","link":"https:\/\/sanuja.com\/blog\/resolving-iis-403-forbidden-access-is-denied","title":{"rendered":"Resolving IIS 403 Forbidden: Access is denied"},"content":{"rendered":"

You do not have permission to view this directory or page using the credentials that you supplied.<\/p><\/blockquote>\n

Every time IIS (Internet Information Services) is given a folder to access with information on a website, the 403 error page will appear if the right permissions are not given to the folder. It is a simple fix, but I don\u2019t know why Microsoft hasn\u2019t posted a proper answer on their KB, MSDN or their other support forums on this issue. <\/p>\n

If you have just created an HTTP\/HTTPS site on IIS 7\/8\/9\/10 (true for most other IIS installs as well), you need to assign IIS_IUSRS security permissions to your assigned web folder. The following steps 1 to 7 describes the procedure.<\/p>\n

1. Right click on the folder (the folder you assigned for web access in IIS)<\/p>\n

2. Choose \u201cProperties\u201d (or \u201cEdit Permissions\u201d if you right clicked while inside the IIS window)
\n\"IIS8_folder_right\"<\/p>\n

3. Go to \u201cSecurity\u201d tab
\n\"IIS8_folder_security\"<\/p>\n

4. In the top box, \u201cGroup or user names\u201d, open \u201cEdit\u2026\u201d (will take you to Permissions window)
\n\"IIS8_folder_add_per\"<\/p>\n

5. You will most likely cannot fine IIS_IUSRS in the list; open, \u201cAdd..\u201d<\/p>\n

6. In the box at the very bottom, \u201cEnter the object names to select (examples):\u201d enter IIS_IUSRS<\/p>\n

7. Click OK and make sure in the Permissions window, you have allowed, Read & execute, List folder contents and Read<\/p>\n

In a nutshell; Right click -> Properties\/Edit Permissions -> Security (TAB) -> Edit (under Group or user names) -> Add (IIS_IUSRS) -> OK (make sure the right permissions described in steps 7 are there)<\/p>\n

Other Solution<\/h3>\n

Another solution is to edit the following registry keys from Registry Editor. You can access the Register Editor in multiple ways. Type regedit<\/em> on Window Search or open run and type regedit<\/em> and enter will open the editor. Make sure you access the Registry Editor with Administrator privileges.<\/p>\n

Warning!<\/strong><\/p>Make sure to backup your registry files before editing. I highly recommend testing this option on a non-production virtual machine prior to editing on the production server. I am not responsible for any catastrophic failures.<\/div>\n

1. Once you open the Registry Editor, navigate to the location: HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL<\/p>\n

2. Create a new DWORD (32-bit Value) entry name \u201cClientAuthTrustMode<\/p>\n

3. Enter “2” in the Value data field (no revocation check).<\/p>\n

\"IIS<\/a>
IIS Regedit addition<\/figcaption><\/figure>\n","protected":false},"excerpt":{"rendered":"

You do not have permission to view this directory or page using the credentials that you supplied. Every time IIS (Internet Information Services) is given a folder to access with information on a website, the 403 error page will appear if the right permissions are not given to the folder. It is a simple fix, … Continue reading Resolving IIS 403 Forbidden: Access is denied<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":11803,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[3],"tags":[7],"class_list":["post-2954","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-computer-science","tag-server"],"jetpack_featured_media_url":"https:\/\/sanuja.com\/blog\/wp-content\/uploads\/2013\/01\/IIS8_regedit_ClientAuthTrustMode.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/sanuja.com\/blog\/wp-json\/wp\/v2\/posts\/2954","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sanuja.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sanuja.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sanuja.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/sanuja.com\/blog\/wp-json\/wp\/v2\/comments?post=2954"}],"version-history":[{"count":7,"href":"https:\/\/sanuja.com\/blog\/wp-json\/wp\/v2\/posts\/2954\/revisions"}],"predecessor-version":[{"id":11809,"href":"https:\/\/sanuja.com\/blog\/wp-json\/wp\/v2\/posts\/2954\/revisions\/11809"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sanuja.com\/blog\/wp-json\/wp\/v2\/media\/11803"}],"wp:attachment":[{"href":"https:\/\/sanuja.com\/blog\/wp-json\/wp\/v2\/media?parent=2954"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sanuja.com\/blog\/wp-json\/wp\/v2\/categories?post=2954"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sanuja.com\/blog\/wp-json\/wp\/v2\/tags?post=2954"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}