I have a MOSS 2007 webapp with 3 sites:

  1. Root web with anonymous access enabled
  2. Subsite with anonymous access enabled
  3. Subsite with anonymous access disabled

When attempting to open site #3 while not logged in the user is prompted to enter their credentials. However, when those credentials are entered incorrectly 3 times, the prompts stop and the user is taken to a blank page. This page contains nothing, but inspecting IIS logs and using Fiddler 2 confirm that the server is returning 401 Unauthorized.

My question is: Why is a blank page being displayed instead of the standard "access denied" page? How can I either customize this blank page to something else, or get SharePoint to return the standard "access denied" page?


I imagine the reason is because SharePoint deals with authorisation, not authentication. You won't get SharePoint's access denied page as that is presented in cases where the users is authenticated but not allowed to see the requested resource (i.e. not authorised).

As for a resolution, I imagine you would need to modify the Web app web.config file. This blog contains details on how to do with although I'm not certain that this is the recommended approach.

An alternative (more elegant) solution would be to publish your SharePoint site with a reverse proxy server such as ForeFront TMG. This allows you to present a branded logon form with a custom error message if authentication fails.

  • I'm using MOSS 2007. I tried configuring the error page in IIS and by setting the <customErrors> element in web.config, but that didn't work. Sep 26 '11 at 22:31
  • Are you using IIS 7? Sep 27 '11 at 19:40
  • No, the server is running IIS 6. Sep 27 '11 at 21:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.