dcsimg

“HTTP Error 401.3 – Unauthorized: Access is denied due to an ACL set on the requested resource.”

Products

Webtrends Analytics 9.x
Webtrends Analytics 8.x

Issue

After installing Webtrends Analytics on Windows Server 2008 R2 and attempting to open the user interface, the following error message displays:

HTTP Error 401.3 – Unauthorized: Access is denied due to an ACL set on the requested resource.

Cause

This error appears when the user account under which the IIS service runs does not have the required permissions to access and serve web server content.

Resolution

The first step in resolving this issue is to verify whether or not Anonymous Authentication has been enabled:

1. Open Windows Server Manager and expand the Roles.

2. Expand the Web Server (IIS) tree and highlight the Internet Information Services (IIS) Manager.

3. Expand the server name and select Webtrends Marketing Lab.

4. Under the IIS section to the right, open Authentication.

5. Verify Anonymous Authentication’s status is set to Enabled.

Assuming Anonymous Authentication is Enabled and the error message persists, edit the Anonymous Authentication setting. The default anonymous user identity should be the IUSR account, which should have access to the web server content. If restrictions on this account prevent it from displaying this content then rights must be assigned to enable functionality. Alternatively, selecting the “Set…” button will allow use of a different account, such as the Webtrends service account, though this will also require the same rights as the IUSR account. An additional option is to select the Application pool identity which, by default, uses the Network Service account, but this will also grant anonymous users access to all associated internal network locations so caution must be exercised if this option is used, and this account also requires rights to access the web server content. To assign access rights, add the chosen account to the IIS_IUSRS group under the Local Users and Groups option in the Computer Management console.

To effect the changes made above, perform the steps below:

1. Open the Windows Services snap-in and stop the Webtrends – User Interface service.

2. Return to the IIS Manager. Stop, then restart the IIS Manager (or run “iisreset” from a command line).

3. Return to the Services snap-in and restart the Webtrends – User Interface service.

4. Launch the Webtrends user interface and confirm it is now accessible.