views:

50

answers:

2

whats the best way to investigate why a server is returning a 403 for a http web request?

Can an iis server be configured to provide a more detailed internal log for 403's?

+1  A: 

I would argue that, as with any permission failure, the server should give as little information as possible. Giving more information could make it easier for nefarious folks to break into your system. IIS does issue a substatus code providing more information -- look in the IIS request logs if it's not in the error page to find it. It is possible to map each of these error individually to a different, more specific error page, but I wouldn't.

tvanfosson
+1  A: 

Yes, you can use Failed request Tracing to know morea bout any IIS problem: http://learn.iis.net/page.aspx/266/troubleshooting-failed-requests-using-tracing-in-iis-7/

CarlosAg