When trying to access the OfficeScan Corporate Edition (OSCE) Management Console, the message You are not authorized to view this page appears.
 

Solution ID:

EN-121047

Product:

OfficeScan - 10.5; OfficeScan Corporate Edition - 6.5
Operating System:
SP 6a; Windows 2000 Server; Windows NT 4.0; Windows XP; Windows 2000 Advanced Server

Published:

7/19/2010 10:58 PM 
 

Problem:

Users are unable to access the OfficeScan HTTP Management console.

The HTTP Error code displayed in the web browser or the IIS Logs is 403.19.

The Microsoft knowledge base Q318380 indicates that Error 403.19 happens because the IIS Service "Cannot execute CGIs for the client in this application pool" and is specific to IIS 6.0.

This issue may occur with the following instances:

    § The OfficeScan server was installed on a Windows 2003 Server, running IIS 6.0

    § The Windows 2003 Server was joined or is part of a Microsoft Windows domain

    § The APACHE web server was not the option used to host the OfficeScan HTTP Management console. Instead, IIS 6.0 Default Web site/New web site was used

This happens because the default application pool of IIS 6.0 on Windows 2003 is Network Service . As such, certain restrictions apply to the account being used, rendering the OSCE Management Console inaccessible.

Since the OfficeScan HTTP Management Console actually makes use of the Common Gateway Interface (CGI) , it needs a higher privilege option to be able to properly view the OSCE Management console.

 

Solution:

Public

 

There are several ways to resolve this:



Option A: IIS 6.0 is used to host only OSCE Management Console

    1. Go to Administrative Tools > Internet Information Services (IIS) Manager.

    2. Expand the Server Name directory and then right-click on Web Sites. Click Properties.

    3. Click on the Service tab, and click on the option Run WWW service in IIS 5.0 isolation Mode.

    4. Click Apply, and agree to restart the WWW Publishing Service.

    5. Finally, click OK to close out the Properties window.



Option B: OSCE Management console on Virtual Directory – IIS 6.0 is only for OSCE

    1. Under Internet Information Services (IIS) Manager Management Console, right-click DefaultAppPool and choose Properties.

    2. Select the Identity tab.

    3. Change the application pool identity to local system from network service.



Option C: OSCE Management console on Virtual Directory – IIS 6.0 to be used with other applications

    1. Go to Administrative Tools > Internet Information Services (IIS) Manager.

    2. Expand the Server Name directory and then click on Application Pools.

    3. Click Action > New > Application Pool.

    4. Create a new Application Pool with the following characteristics:

    Application Pool ID: OSCE
    Application Pool Settings: Use default settings for new application pool

    5. After creating the new OSCE Application Pool, right-click on it and select Properties.

    6. Go to the Identity tab.

    7. Under the Predefined option, select Local System.

    8. Click Yes at the prompt.

    9. Click Apply > OK.

    Next, you would have to set the Virtual Directory to use that Application Pool:

    a. Right-click on Default Web Site -> Officescan and click Properties.

    b. Under the Virtual Directory tab, look for Application Settings. Click on the Create button.

    c. Still under the Virtual Directory tab and Application Settings, locate the Application Pool drop-down list and select OSCE.

    d. Click Apply > OK

 
Option D: OSCE Management console is hosted on a different web site

    1. Go to Administrative Tools > Internet Information Services (IIS) Manager.

    2. Expand the Server Name directory and then click on Application Pools.

    3. Click Action > New > Application Pool.

    4. Create a new Application Pool with the following characteristics:

    Application Pool ID: OSCE
    Application Pool Settings: Use default settings for new application pool

    5. After creating the new OSCE Application Pool, right-click on it and select Properties.

    6. Go to the Identity tab.

    7. Under the Predefined option, select Local System.

    8. Click Yes at the prompt.

    9. Click Apply > OK.

    Next, you would have to set the web site to use that Application Pool:

    a. Right-click on web site created and click Properties.

    b. Under the Home Directory tab, look for Application Settings.

    Click the Remove button to remove the existing application settings.

    Click on the Create button. This should re-create the application settings.

    c. Still under the Home Directory tab and Application Settings, locate the Application Pool drop-down list and select OSCE.

    d. Click Apply > OK.

Related information:


Rate this Solution
Did this article help you? Tell us your comments or suggestions to improve this solution*
 Yes     No, I need further assistance
 
  *This form is an automated system. General questions, technical, sales and product-related issues submitted through this form will not be answered. Click here for further assistance.