401: “You do not have permission to view this directory or page.”

Most time the error indicates the app pool identity account in IIS may not have permission.

Fixing Error 2104: Could not download the Silverlight application. Check web server settings

Fixing Error: Unhandled Error in Silverlight 2 Application
Code: 2104
Category: Initializer Error
Message: Could not download the Silverlight application.
Check web server settings.

When you’re hosting Silverlight, you have to tweak your IIS6 or Appache settings to allow the server to know how to handle the extensions that it’s not familiar with. I’m sure in the future, Microsoft will encode this directly into new releases of IIS, but for now, you have to add these MIME types yourself.

.xaml application/xaml+xml
.xap application/x-silverlight-app
.xbap application/x-ms-xbap

To add the MIME types to IIS6:

1. Choose the Virtual Directory or Default Web Site in IIS
2. Open the context menu and choose “Properties”
3. Select the “HTTP-Headers” tab
4. Click the button labeled “File Types…” in MIME Map section
5. Choose “New Type” and type the extension from above into the extension field and the application type into the MIME type field.
6. After adding all 3, click “OK” then click “Apply” on the main menu. You’re done. No restart needed.

Changing The IIS Application Pool Identity For Impersonation

Microsoft provides a tool that comes with the .Net framework that allows you to easily change the identity of a user that runs an IIS application pool.

With this method you can execute an Asp.Net web application with an integrated security SQL connection string such as:

Data Source=myServerAddress;Initial Catalog=myDataBase;Integrated Security=SSPI;

Providing the application pool user has the necessary permissions for the specified database then there will be no need to store any passwords in the web.config files.

Anyway once you have your domain user that you wish to use for the application pool run the following command:

%windir%\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis –ga [DOMAIN]\[USERNAME]

Running this command will give the specified user the correct permissions to the IIS metadata and also the cright file permissions:

However……..

Running this alone was not enough when I ran this on a couple of servers!

For some reason the aspnet_regiis tool does not set the required access on the windows\temp directory resulting in some very strange errors.

Set permissions on the %windir%\temp directory

1. View the permissions on %windir%\temp directory
2. Click on advanced to view the special permissions
3. Add a new user and enter the name of the user that is running the application pool
4. Set the following special permissions (basically the same as the Users group)
– Traverse Folder / Execute File
– Create Files / Write Data
– Create Folders / Append Data

Now you’re good to go with a new application pool user that has the right permissions!

ASP.NET, ASP.NET AJAX, jQuery, IIS Tutorial

Scoot Gu has blogged a list of links to these technoloies. Check it now and refresh your knowledge
http://weblogs.asp.net/scottgu/archive/2008/10/10/october-10th-links-asp-net-asp-net-ajax-jquery-iis.aspx