Author: gnarlytrout | Posted on: 7/30/2009 9:21:12 AM | Views : 400

 Hello,
I have a Windows 2003 server and a virtual directory setup with "Enable Anomomous Access" checked and the local machine account (IUSR_XXXXXX) entered.  I have the application pool "Identity" set to a 'least priviledge domain user account (DOMAIN\USER).
In the web config, I have "Windows" authentication and Impersonate = "false" (meaning the page is actually running under the domain user account, right?).  Under, "Authorization", I have Allow roles= "New Local Machine Group" of which the domain user is a member and I have Deny users "*". 
From all the samples I could find, this is suppose to allow my user, and deny everyone else, but I get the [401.2] "Access is denied" error.
What the heck am I doing wrong?  Your help is greatly appreciated.
Cam
 
...

Go to the complete details ...