HTTP Error 401.2 - Unauthorized RRS feed

  • Question

  • User621555443 posted

    I am getting below error while accessing IIS website 

    HTTP/1.1 401 Unauthorized
    Cache-Control: private
    Content-Type: text/html; charset=utf-8
    Server: Microsoft-IIS/10.0
    WWW-Authenticate: Negotiate
    WWW-Authenticate: NTLM
    X-Powered-By: ASP.NET
    X-Frame-Options: DENY
    Date: Tue, 05 May 2020 02:23:53 GMT
    Content-Length: 5981
    Proxy-Support: Session-Based-Authentication

    HTTP Error 401.2 - Unauthorized

    You are not authorized to view this page due to invalid authentication headers.


    Most likely causes:

    • No authentication protocol (including anonymous) is selected in IIS.
    • Only integrated authentication is enabled, and a client browser was used that does not support integrated authentication.
    • Integrated authentication is enabled and the request was sent through a proxy that changed the authentication headers before they reach the Web server.
    • The Web server is not configured for anonymous access and a required authorization header was not received.
    • The "configuration/system.webServer/authorization" configuration section may be explicitly denying the user access.

    Things you can try:

    • Verify the authentication setting for the resource and then try requesting the resource using that authentication method.
    • Verify that the client browser supports Integrated authentication.
    • Verify that the request is not going through a proxy when Integrated authentication is used.
    • Verify that the user is not explicitly denied access in the "configuration/system.webServer/authorization" configuration section.
    • Create a tracing rule to track failed requests for this HTTP status code. For more information about creating a tracing rule for failed requests, click here.

    Detailed Error Information:

    Module    IIS Web Core
    Notification    AuthenticateRequest
    Handler    ExtensionlessUrlHandler-ISAPI-4.0_64bit
    Error Code    0x80070005
    Requested URL    http://lab-AP-aw01:80/APCommunication
    Physical Path    C:\inetpub\wwwroot\AP\AP_Communication
    Logon Method    Not yet determined
    Logon User    Not yet determined

    Tuesday, May 5, 2020 2:59 AM

All replies

  • User-17257777 posted

    Hi KishoreIDC,

    The problem could be Anonymous Authentication was disabled in IIS manager.

    Make sure Anonymous access is enabled on IIS -> Authentication.

    For more details, you can refer to this link.

    Best Regards,

    Jiadong Meng

    Wednesday, May 6, 2020 7:07 AM