SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a MOSS 2007 webapp with 3 sites:

  1. Root web with anonymous access enabled
  2. Subsite with anonymous access enabled
  3. Subsite with anonymous access disabled

When attempting to open site #3 while not logged in the user is prompted to enter their credentials. However, when those credentials are entered incorrectly 3 times, the prompts stop and the user is taken to a blank page. This page contains nothing, but inspecting IIS logs and using Fiddler 2 confirm that the server is returning 401 Unauthorized.

My question is: Why is a blank page being displayed instead of the standard "access denied" page? How can I either customize this blank page to something else, or get SharePoint to return the standard "access denied" page?

share|improve this question
up vote 2 down vote accepted

I imagine the reason is because SharePoint deals with authorisation, not authentication. You won't get SharePoint's access denied page as that is presented in cases where the users is authenticated but not allowed to see the requested resource (i.e. not authorised).

As for a resolution, I imagine you would need to modify the Web app web.config file. This blog contains details on how to do with although I'm not certain that this is the recommended approach.

An alternative (more elegant) solution would be to publish your SharePoint site with a reverse proxy server such as ForeFront TMG. This allows you to present a branded logon form with a custom error message if authentication fails.

share|improve this answer
I'm using MOSS 2007. I tried configuring the error page in IIS and by setting the <customErrors> element in web.config, but that didn't work. – Kyle Trauberman Sep 26 '11 at 22:31
Are you using IIS 7? – Benjamin J Athawes Sep 27 '11 at 19:40
No, the server is running IIS 6. – Kyle Trauberman Sep 27 '11 at 21:13

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.