Select the product you need help with

Error message when you visit a Web site that is hosted on IIS 7.0: "HTTP Error 403.19 - Forbidden"

Article ID: 942048 - View products that this article applies to.

SYMPTOMS

You have a Web site that is hosted on Internet Information Services (IIS) 7.0. When you visit this Web site in the Web browser, you receive an error message that resembles the following:

Server Error in Application "ApplicationName"
--------------------------------------------------------------------------------
HTTP Error 403.19 - Forbidden
The configured user for this application pool does not have sufficient privileges to run CGI applications.
HRESULT: 0x80070522
Description of HRESULT: A required privilege is not held by the client.

Back to the top | Give Feedback

CAUSE

This problem occurs because the identity of the application pool does not have the Replace a process level token user right.

Back to the top | Give Feedback

RESOLUTION

To resolve this problem, use one of the following methods.

Method 1

Make sure that the identity of the application pool has the Replace a process level token user right. To do this, follow these steps:

Click Start, click Run, type secpol.msc, and then click OK.
In the Local Security Policy Microsoft Management Console (MMC) snap-in, expand Local Policies, and then click User Rights Assignment.
In the details pane, right-click Replace a process level token.
In the Replace a process level token Properties dialog box, click Add User or Group.
In the Select Users or Groups dialog box, type the name of the user account, click Check Names to verify the account, and then click OK.

Method 2

Set the value of the Impersonate User property in the CGI settingsto false. To do this, follow these steps.

Click Start, click Run, type Inetmgr, and then click OK.

If you are prompted for an administrator password or for confirmation, type the password or click Continue.
In IIS Manager, expand ComputerName, expand Web Sites, and then click the Web site for which you want to change the CGI setting.
Double-click CGI.
Under the Security node, change the value of the Impersonate User property to False.