Having issues with clients logging into your Internet Information Services (IIS) Web site? If so, don't be surprised. Authentication and authorization failures are quite common in IIS. That's why Microsoft created the AuthDiag tool to troubleshoot and determine the cause of these issues.
AuthDiag analyzes IIS metabase configuration and system-wide policies, warns users of possible points of failure, and guides them through problem resolution.
AuthDiag 1.0 also includes a monitoring tool called AuthMon that captures snapshots of problems while as they occur in real time. You can run AuthMon using the GUI interface or set it up to run silently and just write the information to a log file.
Here are a few example issues that this tool can help you correct:
- 401.1 authentication failures
- 401.3 failed ACL on file or directory
- Failed authentication because of incorrect privileges in token
- Failure to access a page based on metabase configuration
- Kerberos failure when worker processes use custom identities
- FTP user isolation -- file system configured incorrectly
- Removal of system permissions for process identities causes "Access Denied" error
To use the AuthDiag utility, go to Programs -> IIS Diagnostics -> AuthDiag, select the Task you want to run and the
Inside the IIS Diagnostics Toolkit
How to install the Microsoft IIS Diagnostics Toolkit
How to use SSL Diagnostics 1.0
How to use Authentication and Access Control Diagnostics (AuthDiag) 1.0
How to use Exchange Server SMTP Diagnostics 1.0
How to use Log Parser 2.2
How to use WFetch 1.4
How to use Trace Diagnostics
How to use Debug Diagnostics 1.0
About the author: Tim Fenner (MCSE, MCSA: Messaging, Network+ and A+) is a senior systems administrator who oversees a Microsoft Windows, Exchange and Office environment. He is also an independent consultant who specializes in the design, implementation and management of Windows networks.
This was first published in October 2007