Problem
I recently came across this error while upgrading an old ASP.NET application from IIS6 to IIS7…
401 Unauthorized: Access is denied due to invalid credentials

How to fix it
Our ASP.NET application was using Windows Authentication to authenticate users.
It turned out that IIS7 was trying to use Kerberos authentication by default rather than NTLM.
The solution is to either configure Kerberos authentication or you can you can change the default security provider in IIS7 by ….
- Opening the IIS Manager Console
- Navigate to the web site
- Click the “Authentication” menu item
- Click the “Windows Authentication” provider
- Click the “Providers” link from the right hand menu
- Move “NTLM” to the top of the authentication providers list, above “Negotiate”

Latest posts by Shane Bartholomeusz (see all)
- GitHub Actions Exam Study Guide - 14th February 2025
- Solved: Build Errors Not Showing in VS 2022 - 21st November 2024
- How To: Configure VSCode to Trust Self-Signed Certs - 16th August 2024