Error message when you visit a Web site that is hosted on IIS 7.0: "HTTP Error 403.4 - Forbidden"

When you visit a Web site that is hosted on Internet Information Services (IIS) 7.0, you receive an error message that resembles the following:

This issue occurs because the Web site requires incoming requests to be made by using the Secure Sockets Layer (SSL) HTTPS protocol. However, the client sent the request by using the HTTP protocol.

To resolve this issue, use one of the following methods.

Method 1

Use the HTTPS protocol to visit the Web site. That is, make sure that the URL begins with "https."

For example, to visit the AdventureWorks Web site, type the following:

Method 2

In the SSL settings for the Web site, clear the Require SSL check box. To do this, follow these steps.

Important These steps may increase your security risk. These steps may also make the computer or the network more vulnerable to attack by malicious users or by malicious software such as viruses. We recommend the process that this article describes to enable programs to operate as they are designed to or to implement specific program capabilities. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this process in your particular environment. If you decide to implement this process, take any appropriate additional steps to help protect the system. We recommend that you use this process only if you really require this process.

1. Click Start, click Run, type Inetmgr, and then click OK.
   
   If you are prompted for an administrator password or for confirmation, type your password, or click Continue.
2. In Internet Information Services (IIS) Manager, expand Computer_Name, expand Web Sites, and then click the Web site that you want to remove the SSL feature from.
3. Double-click SSL Settings.
4. On the SSL Settings page, clear the Require SSL check box, and then click Apply.