Knowledge Base

Support

The message "You are not authorized to view this page" shows up when accessing the Worry-Free Business Security (WFBS) console

Solution IDLast Updated
1037391Date : 2012/02/9 Time: 5:33 AM (PST)


Product/VersionPlatform
Worry-Free Business Security Standard/Advanced - 5.1, 6.0, 7.0
Windows - 2003 Small Business Server, 2003 Standard Server Edition

Problem Description

The issue occurs because the access rights assigned to the IIS 6.0 service user account is low-level. By default, application pools operate under the Network Service user account, which has low-level user access rights. This user account provides better security against attackers or malicious users with the intent of taking over the computer that runs the World Wide Web Publishing Service.
 

On the other hand, the Local Service user account has low-level access rights but is more useful in situations that do not require access to resources on remote computers.
 

Configuring application pools to run under the Local System user account will provide greater user access rights that the Network Service or Local Server user accounts.

Solution

To resolve the issue, please do the following:
 

Note: Open the attached HTML file to view a solution with images. This could take some time to open due to large images.
   

1.

Open IIS Manager and double-click the local computer icon.
   

2.

Right-click Application Pools and then click New > Application Pool.
   

3.

Choose one of these options:
     
 

•

Use default settings for new application pool (recommended)
     
 

•

Use existing application pool as template - This option will require you to choose an Application Pool name.
     

4.

Click OK.
   

5.

Return to the local computer icon and find the new Application Pool.
   

6.

Right-click the Application Pool and click Properties.
   

7.

Click the Identity tab and choose one of these options:
     
 

•

Predefined (recommended)
     
   

- This refers to the standard service accounts like Network Service (default), Local Service, and Local System.
     
   

Note: You can reduce security vulnerability by using a very low-privileged account such as Network Service.
     
   

- This requires you to choose a predefined account from the option list.
     
 

•

Configurable
     
   

- This refers to registered user names.
     
   

- This option requires you to specify the username and password of the account under which the worker process will operate.
   

8.

Click OK.
   

9.

Look for the OfficeScan virtual web site.
   

10.

Right-click the virtual web site and click Properties.
   

11.

Click the Home Directory tab and select the created Application Pool.
   

12.

Click OK when the Inheritance Overrides prompt shows up.
   

13.

Stop and restart the OfficeScan virtual web site.
   
 
 Related Information:
   
 • Cannot access the WFBS console or access its tabs - For IIS 6.0

 •

 Cannot access the WFBS console or access its tabs - For IIS 7.0   


Rate this Solution
Did this article help you?  
 
 Please provide your comments to help us improve this solution.

 
  *This form is an automated system. General questions, technical, sales and product-related issues submitted through this form will not be answered.
 
 

Connect with us on