accessing asp pages having restricted access

Hi, I have an ASP (not ASP.NET) application installed on Vista. Some ASP pages have restricted access. When I browse the restricted pages through Windows 2K or XP client, it is prompting me the user name/password dialog. And when I give the proper username/password, it is displaying me the restricted pages. But, it is not prompting me the same in Vista server. It is giving me the following error.
Server Error in 'Default Web Site/test' Application. ---------------------------------------------------------------------------- ---- HTTP Error 401.3 - Unauthorized Description: The ACL on this resource denied access to the authenticated user Error Code: 0x80070005 Notification: AuthenticateRequest Module: IIS Web Core Requested URL: http://localhost:80/test/test.asp Physical Path: C:\Program Files\test\test.asp Logon User: domain\user Logon Method: Negotiate Handler: ASPClassic ---------------------------------------------------------------------------- ---- Server Version Information: Internet Information Services 7.0.

I suspect this is UAP, just for testing, try disabling it. Click Start > All Programs > Accessories > Run > type in MSCONFIG > OK > Tools (tab) > scroll down, select "Disable UAP" > click Launch
Restart the system and try accessing the page again. -- -- Andre Windows Connected | http://www.windowsconnected.com Extended64 | http://www.extended64.com Blog | http://www.extended64.com/blogs/andre http://spaces.msn.com/members/adacosta
"John" wrote in message

Hi, I have an ASP (not ASP.NET) application installed on Vista. Some ASP pages have restricted access. When I browse the restricted pages through Windows 2K or XP client, it is prompting me the user name/password dialog. And when I give the proper username/password, it is displaying me the restricted pages. But, it is not prompting me the same in Vista server. It is giving me the following error.
Server Error in 'Default Web Site/test' Application. ---------------------------------------------------------------------------- ---- HTTP Error 401.3 - Unauthorized Description: The ACL on this resource denied access to the authenticated user Error Code: 0x80070005 Notification: AuthenticateRequest Module: IIS Web Core Requested URL: http://localhost:80/test/test.asp Physical Path: C:\Program Files\test\test.asp Logon User: domain\user Logon Method: Negotiate Handler: ASPClassic ---------------------------------------------------------------------------- ---- Server Version Information: Internet Information Services 7.0.

Yeh, the address being http://localhost suggested you were accessing a ASP on your machine. This probably will be due to UAP because it's server side code, running on a "server" (or IIS being a web server). Normally on Windows Server 2003 based IIS servers, you won't get this problem because of the whole Vista thing.
*sigh* confused myself... basically it's because you're accessing a server side code on your computer - it shouldn't happen with ASP files on other Internet websites :o)
-- Zack Whittaker » ZackNET Enterprises: www.zacknet.co.uk » MSBlog on ResDev: www.msblog.org » Vista Knowledge Base: www.vistabase.co.uk » This mailing is provided "as is" with no warranties, and confers no rights. All opinions expressed are those of myself unless stated so, and not of my employer, best friend, Ghandi, my mother or my cat. Glad we cleared that up!
--: Original message follows :-- "Andre Da Costa [Extended64]" wrote in message

I suspect this is UAP, just for testing, try disabling it. Click Start All Programs > Accessories > Run > type in MSCONFIG > OK > Tools (tab) scroll down, select "Disable UAP" > click Launch
Restart the system and try accessing the page again. -- -- Andre Windows Connected | http://www.windowsconnected.com Extended64 | http://www.extended64.com Blog | http://www.extended64.com/blogs/andre http://spaces.msn.com/members/adacosta
"John" wrote in message Hi, I have an ASP (not ASP.NET) application installed on Vista. Some ASP pages have restricted access. When I browse the restricted pages through Windows 2K or XP client, it is prompting me the user name/password dialog. And when I give the proper username/password, it is displaying me the restricted pages. But, it is not prompting me the same in Vista server. It is giving me the following error.
Server Error in 'Default Web Site/test' Application. ---------------------------------------------------------------------------- ---- HTTP Error 401.3 - Unauthorized Description: The ACL on this resource denied access to the authenticated user Error Code: 0x80070005 Notification: AuthenticateRequest Module: IIS Web Core Requested URL: http://localhost:80/test/test.asp Physical Path: C:\Program Files\test\test.asp Logon User: domain\user Logon Method: Negotiate Handler: ASPClassic ---------------------------------------------------------------------------- ---- Server Version Information: Internet Information Services 7.0.

Hi John, I have not yet bumped into this one, but from what I understand of what you have said the issue is not in the IIS 7 site and config, but is likely in the config of Vista itself (and its IE) regarding what security authentications protocols it can use as a client. In other words, as I hear it You have the Asp app running on IIS 7 with both anonymous and restricted parts From a W2k or an XP you can access either part with appropriate authentication prompting. From the Vista itself where this is installed (localhost in example url) you can only access the anonymous part, you do not get authentication prompt, but do see the log entry. I would speculate that if you browsed from a different Vista that is similarly configured (not in domain if the Wk2 and XP were not, or in if in; and, allowed to use Windows integrated authentication in the IE settings, or not, just as for the W2k and XP) as an authentication client, you would experience the same.
The message seems to be saying that "I know who you are, and you are not allowed. Since I know who you are I will not reprompt." At least that is what your shown message's Logon User: domain\user is saying - that it already knows domain\user and domain\user is not granted on the web content.
"John" wrote in message

Hi, I have an ASP (not ASP.NET) application installed on Vista. Some ASP pages have restricted access. When I browse the restricted pages through Windows 2K or XP client, it is prompting me the user name/password dialog. And when I give the proper username/password, it is displaying me the restricted pages. But, it is not prompting me the same in Vista server. It is giving me the following error.
Server Error in 'Default Web Site/test' Application. ---------------------------------------------------------------------------- ---- HTTP Error 401.3 - Unauthorized Description: The ACL on this resource denied access to the authenticated user Error Code: 0x80070005 Notification: AuthenticateRequest Module: IIS Web Core Requested URL: http://localhost:80/test/test.asp Physical Path: C:\Program Files\test\test.asp Logon User: domain\user Logon Method: Negotiate Handler: ASPClassic ---------------------------------------------------------------------------- ---- Server Version Information: Internet Information Services 7.0.

Hi Robert, Thanks for your reply.
I have an ASP (not ASP.NET) application installed in Vista Beta 2 (Build : 5384). I have added my domain\user account in the Administrators group. The ASP application performs this task.
ASP application calls a C++ dll that has some business logic and this dll fills the SQL Server 2005 database
Comment : When I access the page, it is giving me "Request Timed out" error when I logged in as domain\user. It is working fine when I logged in as MachineName\Administrator. [This I dont want to do] It is working when I add "http://localhost" as a trusted site. [This I dont want to do] It is working fine when I disable UAP. [This I dont want to do]
Can you pl. suggest me some solution for this problem.
Thanks in Advance.
-John-
"Roger Abell [MVP]" wrote:

Hi John, I have not yet bumped into this one, but from what I understand of what you have said the issue is not in the IIS 7 site and config, but is likely in the config of Vista itself (and its IE) regarding what security authentications protocols it can use as a client. In other words, as I hear it You have the Asp app running on IIS 7 with both anonymous and restricted parts From a W2k or an XP you can access either part with appropriate authentication prompting. From the Vista itself where this is installed (localhost in example url) you can only access the anonymous part, you do not get authentication prompt, but do see the log entry. I would speculate that if you browsed from a different Vista that is similarly configured (not in domain if the Wk2 and XP were not, or in if in; and, allowed to use Windows integrated authentication in the IE settings, or not, just as for the W2k and XP) as an authentication client, you would experience the same.
The message seems to be saying that "I know who you are, and you are not allowed. Since I know who you are I will not reprompt." At least that is what your shown message's Logon User: domain\user is saying - that it already knows domain\user and domain\user is not granted on the web content.
"John" wrote in message Hi, I have an ASP (not ASP.NET) application installed on Vista. Some ASP pages have restricted access. When I browse the restricted pages through Windows 2K or XP client, it is prompting me the user name/password dialog. And when I give the proper username/password, it is displaying me the restricted pages. But, it is not prompting me the same in Vista server. It is giving me the following error.
Server Error in 'Default Web Site/test' Application. ---------------------------------------------------------------------------- ---- HTTP Error 401.3 - Unauthorized Description: The ACL on this resource denied access to the authenticated user Error Code: 0x80070005 Notification: AuthenticateRequest Module: IIS Web Core Requested URL: http://localhost:80/test/test.asp Physical Path: C:\Program Files\test\test.asp Logon User: domain\user Logon Method: Negotiate Handler: ASPClassic ---------------------------------------------------------------------------- ---- Server Version Information: Internet Information Services 7.0.