IIS - 401.3 - Unauthorized

Question

I am trying to get started with using IIS. I created a new site on IIS Manager, mapped it to a folder on my file system and added index.html to the folder. I have set the po

Answer 1

TL;DR;

In most cases, granting access to the following account(s) (one|both) will be enough:

1. IIS AppPool\DefaultAppPool
2. IUSR

with Access Rights:

1. Read & Execute
2. List folder contents
3. Read

That's it!

Read on for a more detailed explanation...

---

1. Open IIS and select your application.
2. On the right side click on Authentication.
3. Select "Anonymous authentication" here.
4. The following dialog pops up.

Grant access to the web application folder's ACL depending what is selected in the pic above:

• Specific user: grant access for both IUSR (in my case) + IIS AppPool\DefaultAppPool
• Application pool identity: grant access for IIS AppPool\DefaultAppPool only

IIS AppPool\DefaultAppPool account is the default AppPool account for new IIS web applications, if you have set a custom account, use the custom one.

---

Give the following permissions to the account(s):

1. Read & Execute
2. List folder contents
3. Read