New Top-Level Site - Internet Information Services (IIS) Errors

SBS 2003 R2 with WSS 2.0

Created a new top-level site but we cannot access it due to the following
errors:


You are not authorized to view this page
You do not have permission to view this directory or page using the
credentials that you supplied.
--------------------------------------------------------------------------------

Please try the following:

Contact the Web site administrator if you believe you should be able to view
this directory or page.
Click the Refresh button to try again with different credentials.
HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials.
Internet Information Services (IIS)


I do not see a way to change the credentials in IIS. The exsiting
http://companyweb is currently running and fully accessible without any
issues.

Any suggestions what to look at to resolve this issue?

Thank you,
Ed Podowski

Hello Ed,

Thanks for your post.

Based on research and experience, this issue may occur if the following conditions are true:

" The IIS 6.0 Web site is part of an IIS application pool.
" The application pool is running under a local account or under a domain user account.
" The Web site is configured to use Integrated Windows authentication only.
" When the Web site uses Integrated Authentication and has a name that is mapped to the local loopback address.

Please refer to the steps in below KB article to troubleshoot the issue:

You receive error 401.1 when you browse a Web site that uses Integrated Authentication and is hosted on IIS 5.1 or a later version
http://support.microsoft.com/kb/896861

You receive an "HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials" error message when you try to access a Web site that is part of an IIS 6.0
application pool
http://support.microsoft.com/kb/871179/en-us

Hope this helps.



Best regards,
Robbin Meng(MSFT)
Microsoft Online Newsgroup Support

================================================== ================
Please post your SBS 2008 related questions to the SBS newsgroup on Connect website:
https://connect.microsoft.com/sbs08/...i/default.aspx

Please post your EBS related questions to the EBS newsgroup on Connect website:
https://connect.microsoft.com/ebs08/...i/default.aspx

If you want to use a newsreader other than a web forum to access these newsgroups,
please refer to the following blog to apply NNTP password and configure a newsreader:
http://msmvps.com/blogs/bradley/arch...ewsgroups.aspx
================================================== ================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ================
This posting is provided "AS IS" with no warranties, and confers no rights.
================================================== ================

Robbin,

Thank you for your help. I read this article before, but dismissed it for
some reason that I won't go into here. I was always trying to access the new
site from the server. I went to one of the desktops and I was able to access
the new Top Level Site from there.

Appearently I completed the procedure to create a new top-level site
correctly.

I am going to post another question on accessing the companyweb site through
a VPN connection. DNS is not resolving correctly to find the site.

Thank you again,
Ed Podowski



""Robbin Meng [MSFT]"" wrote:

>
> Hello Ed,
>
> Thanks for your post.
>
> Based on research and experience, this issue may occur if the following conditions are true:
>
> " The IIS 6.0 Web site is part of an IIS application pool.
> " The application pool is running under a local account or under a domain user account.
> " The Web site is configured to use Integrated Windows authentication only.
> " When the Web site uses Integrated Authentication and has a name that is mapped to the local loopback address.
>
> Please refer to the steps in below KB article to troubleshoot the issue:
>
> You receive error 401.1 when you browse a Web site that uses Integrated Authentication and is hosted on IIS 5.1 or a later version
> http://support.microsoft.com/kb/896861
>
> You receive an "HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials" error message when you try to access a Web site that is part of an IIS 6.0
> application pool
> http://support.microsoft.com/kb/871179/en-us
>
> Hope this helps.
>
>
>
> Best regards,
> Robbin Meng(MSFT)
> Microsoft Online Newsgroup Support
>
> ================================================== ================
> Please post your SBS 2008 related questions to the SBS newsgroup on Connect website:
> https://connect.microsoft.com/sbs08/...i/default.aspx
>
> Please post your EBS related questions to the EBS newsgroup on Connect website:
> https://connect.microsoft.com/ebs08/...i/default.aspx
>
> If you want to use a newsreader other than a web forum to access these newsgroups,
> please refer to the following blog to apply NNTP password and configure a newsreader:
> http://msmvps.com/blogs/bradley/arch...ewsgroups.aspx
> ================================================== ================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ================================================== ================
> This posting is provided "AS IS" with no warranties, and confers no rights.
> ================================================== ================
>
>
>
> .
>

Hi Ed,

Thanks for your update.

As you indicated, if the newly created top-level site can be accessed correctly by other users or on other client computers, the site should be fine. Issue may be caused by
improper configuration of individual computer or user authentication/permission.

If you still have the issue of accessing the companyweb site through a VPN, you are welcome to submit a new thread for the new issue. I believe more people will throw lights
on it. At the same time, I would like to suggest you re-run the CEICW to reset DNS settings and companyweb configurations.

As far as I know, sometimes when you use the Connection Manager package on Windows client, the VPN connection is configured without a "Connection-specific DNS
Suffix" value. The result is that the client computer appends the DNS suffix for its primary Internet connection to the companyweb name, and then tries to resolve the resulting
FQDN by using the Internet name servers. For example, if the DNS suffix for the computer's Internet connection is MyISP.com, the computer tries to resolve the host name
Companyweb.MyISP.com. It cannot resolve this name, and the connection times out.

If so, there are several workarounds to this issue:

Method 1. Create a static WINS entry for companyweb

To create the static WINS entry for companyweb, follow these steps:

a. On the SBS computer, click Start, point to Administrative Tools, and then click WINS.
b. Under <servername>, right-click Active Registrations, and then click New Static Mapping.
c. In the "Computer name" box, type "companyweb" (without quotes).
d. In the "IP address" box, type the IP address of the SBS computer's internal network adapter, and then click OK.

Method 2. Manually create a VPN connection on the Windows client computer, and then manually enter the SBS 2003 DNS Suffix information.

Method 3. On each Windows client computer using the connection manager, add an entry for companyweb to the hosts file.

To create the companyweb entry in the hosts file, follow these steps:

1. On the Windows client computer, click Start, click Run, type "%systemroot%\system32\drivers\etc" (without quotes), and then click OK.
2. In the etc folder, right-click the hosts file, and then click Open With.
3. Click to select Notepad, and then click OK.
4. On the line below the "127.0.0.1 localhost" entry, type the IP address of the SBS computer's internal network adapter, press the Tab key, and then type
"companyweb" (without quotes).
5. Press Ctr+S, and then close Notepad.

Hope this helps.

Again, thank you for posting in the SBS newsgroups. Please feel free to contact us again in the future.



Best regards,
Robbin Meng(MSFT)
Microsoft Online Newsgroup Support

================================================== ================
Please post your SBS 2008 related questions to the SBS newsgroup on Connect website:
https://connect.microsoft.com/sbs08/...i/default.aspx

Please post your EBS related questions to the EBS newsgroup on Connect website:
https://connect.microsoft.com/ebs08/...i/default.aspx

If you want to use a newsreader other than a web forum to access these newsgroups,
please refer to the following blog to apply NNTP password and configure a newsreader:
http://msmvps.com/blogs/bradley/arch...ewsgroups.aspx
================================================== ================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ================
This posting is provided "AS IS" with no warranties, and confers no rights.
================================================== ================