Webmasters Stack Exchange is a question and answer site for pro webmasters. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an ASP.NET web form using Microsoft's boilerplate Active Directory login page, set up exactly as suggested.

Windows Authentication is activated on the "Default Website" and "MyWebsite" levels, and Domain\This.User is given "Allow" access to the site. After entering the valid credentials for This.User on the web form, a popup window appears asking me to enter my credentials yet again. Despite entering valid credentials for This.User (after attempting Domain\This.User and This.User formats), it rejects the credentials and returns an unauthorized security headers page (error 401.2). Active Directory user This.User is valid, the IP address of the AD server has been verified and SPN's have been set up for the server.

Error Code: 0x80070005

Default Web Site security config:

    <identity impersonate="true" />
    <authentication mode="Windows" />
    <customErrors mode="Off" />
    <compilation debug="true" />

Sub web site security

<authentication mode="Windows">
    <forms loginUrl="~/logon.aspx" timeout="2880" />
    <deny users="?" />
    <allow users="*" />
share|improve this question
Please include things like log reports, and configurations. – Simon Hayter Nov 1 '13 at 23:18

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.