You get the following error message when accessing the Worry-Free Business Security (WFBS) console.
"You are not authorized to view this page"
The issue happens because the access rights assigned to the IIS 6.0 service user account is low-level. By default, application pools operate under the Network Service user account, which has low-level user access rights. This user account provides better security against attackers or malicious users with the intent of taking over the computer that runs the World Wide Web Publishing Service.
On the other hand, the Local Service user account has low-level access rights but is more useful in situations that do not require access to resources on remote computers.
Configuring application pools to run under the Local System user account will provide greater user access rights that the Network Service or Local Server user accounts.
To resolve the issue:
- Open IIS Manager and double-click the local computer icon.
- Right-click Application Pools and then click New > Application Pool.
- Choose one of these options:
- Use default settings for new application pool (recommended)
- Use existing application pool as template - This option will require you to choose an Application Pool name.
- Click OK.
- Return to the local computer icon and find the new Application Pool.
- Right-click the Application Pool and click Properties.
- Click the Identity tab and choose one of these options:
- Predefined (recommended)
- This refers to the standard service accounts like Network Service (default), Local Service, and Local System.You can reduce security vulnerability by using a very low-privileged account such as Network Service.
- This requires you to choose a predefined account from the option list.
- This refers to the standard service accounts like Network Service (default), Local Service, and Local System.
- Configurable
- This refers to registered user names.
- This option requires you to specify the username and password of the account under which the worker process will operate.
- Predefined (recommended)
- Click OK.
- Look for the OfficeScan virtual web site.
- Right-click the virtual web site and click Properties.
- Click the Home Directory tab and select the created Application Pool.
- Click OK when the Inheritance Overrides prompt shows up.
- Stop and restart the OfficeScan virtual web site.
