HTTP 错误 401.3 - 未经授权
我在 Windows 7 和 IIS 7.5 中新创建的网站中遇到此错误。我创建了 SSL 证书并完成了新网站的绑定。
HTTP 错误 401.3 - 未经授权
由于 Web 服务器上此资源的访问控制列表 (ACL) 配置或加密设置，您无权查看此目录或页面。
早些时候，当我创建网站时，我在“添加网站”对话框中选择了“应用程序用户（通过身份验证）”。当我单击“测试设置...”按钮时，我收到以下错误消息：
服务器配置为使用内置帐户的直通身份验证来访问指定的物理路径。但是，IIS 管理器无法验证内置帐户是否具有访问权限。确保应用程序池标识具有对物理路径的读取访问权限。如果此服务器已加入域，并且应用程序池标识为 NetworkService 或 LocalSystem，请验证 \$ 是否具有对物理路径的读取访问权限。然后再次测试这些设置。
请提出解决方案。
谢谢。
I am getting this errror in my newly created website in Windows 7 and IIS 7.5. I created an SSL certificate and done binding new website.
HTTP Error 401.3 - Unauthorized
You do not have permission to view this directory or page because of the access control list (ACL) configuration or encryption settings for this resource on the Web server.
Earlier when I created the website, I selected 'application user(pass through authentication)' in 'Add Website' dialogue. and when I click "Test Settings ..." button, I get this error message:
The server is configured to use pass-through authentication with a built-in account to access the specified physical path. However, IIS Manager cannot verify whether the built-in account has access. Make sure that the application pool identity has Read access to the physical path. If this server is joined to a domain, and the application pool identity is NetworkService or LocalSystem, verify that \$ has Read access to the physical path. Then test these settings again.
Please suggest solution to this.
Thanks.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（4）
我遇到了同样的问题，确保我的 DefaultAppPool 在 ApplicationPoolIdentity 下运行，并且 DefaultAppPool 具有该文件夹的权限，但某些文件仍然无法加载。
原来我的问题是匿名身份验证用户被设置为其他人而不是ApplicationPoolIdentity
Screenshot
I had the same issue, ensured my DefaultAppPool was running under ApplicationPoolIdentity and the DefaultAppPool had permissions to the folder, but some files still didn't load.
Turns out my problem was that the anonymous authentication user was set to someone else instead of ApplicationPoolIdentity
Screenshot
确保您的网站和网站的应用程序池都在同一身份下运行。然后确保该身份对虚拟目录具有所需的权限。我遇到了完全相同的问题，上面的两项检查修复了它。
Make sure that application pool of your website and website both are running under the same identity. Then make sure that this identity has required permissions on the virtual directory. I had exact same issue and above two checks fixed it.
IIS 7 还创建“IUSR”作为通过 IIS 访问文件的默认用户。因此，请确保用户 IUSR 具有文件/文件夹的读取权限。
如何检查IUSR是否有读权限？右键单击->文件夹->属性->安全选项卡 查看 IUSR 是否在组或用户名列表中，如果否，
单击编辑 ->添加->高级->立即查找 ->选择 IUSR 并单击“确定”-->单击“应用”
IIS 7 also creates "IUSR" as default user to access files via IIS. So make sure user IUSR has read access to files/folders.
How to check if IUSR has read Access? Right Click -> Folder -> Properties -> Security Tab See if IUSR is in Group or user names list, If No.
Click Edit -> Add -> Advanced -> Find Now -> Select IUSR and click OK -->click Apply
下面的内容对我有用。我没有设置 SSL，只是在 IIS 中设置一个新网站。这样做后，我立即无法访问该网站并出现此错误消息。
当我创建新网站时，还创建了一个新的应用程序池。此应用程序池的标识已设置为
ApplicationPoolIdentity。 正如 Suhas 提到的，网站的应用程序池和网站本身必须运行在相同的身份。 （我不知道如何检查网站的身份，但可以通过转到应用程序池并查看身份列来检查应用程序池的身份）。默认应用程序池名称是DefaultAppPool。我向网站添加了权限（右键单击网站名称 -> 编辑权限 -> 安全 -> 编辑 -> 添加），将该网站链接到DefaultAppPool 对象，该对象反过来为站点提供对默认用户及其设置的访问权限。 （默认用户是在安装 IIS 时创建的。有关详细信息，请参阅 微软文档）。
我认为这就是获得访问权限所需的全部内容，但这是不正确的。网站的应用程序池还必须设置为
DefaultAppPool。这可以通过右键单击该站点 -> 来完成。管理网站->高级设置->将应用程序池值更改为DefaultAppPool。The below worked for me. I did not set up an SSL, just a new website within IIS. Upon doing so I was immediately unable to access the website with this error message.
When I created the new website, a new Application Pool was also created. The Identity of this Application Pool was set to
ApplicationPoolIdentity. As mentioned by Suhas, the Application Pool of the website and the website itself must be running under the same identity. (I do not know how to check the identity of the website, but the Application Pool's Identity can be checked by going to Application Pools and looking at the Identity column). The default Application Pool name isDefaultAppPool.I added permissions to the site (right click the site name -> Edit Permissions -> Security -> Edit -> Add), linking the site to the DefaultAppPool object, which in turn gives the site access to the default user and it's settings. (The default user is created when IIS is installed. Read more about this in Microsoft's docs).
I thought this would be all that's needed to obtain access, but this is incorrect. The website's Application Pool must also be set to
DefaultAppPool. This can be done by right clicking on the site -> Manage Website -> Advanced Settings -> Change the Application Pool value toDefaultAppPool.