Solving "You do not have permission to view this directory or page." on attempting to edit Administration Screen settings

I am surprised that I have not written about this before.

This scenario may happen when you set up a new machine. And this is because of settings within the webserver.

In the screen below, you can see that I have attempted to edit the values on one of the Administration screens. In this case, it happens to be the

Administration > System > Logging screen.

After clicking "change", I get a modal "Sign In" challenge screen. This requires me to enter a username and password.

If I click to cancel the message "You do not have permission to view this directory or page." I get the following message displayed.

The issue is resolved so that any administrator can make changes by updating the IIS settings.

Here, I have launched the Internet Information Services (IIS) Manager and have opened the Authentication settings for the CRM website.

I can resolve my issue by editing the Anonymous Authentication settings to use the Application pool identity.

  • Working with Sage 200, we have always set the CRM App pool to match the user on the Sage 200 sites and then it to use the App Identity (as above). This does seem to pretty much always fix the issue - only occasionally had I had to go a bit further and add the same user to the CRM Registry section. 

  • I often wondered if there was a proper way to deal with this. The way that I found that worked was to edit the registry and find the eware branch and set the permissions to allow the IUSR account full access to that branch of the registry and that seemed to solve it as well. Sometimes, for whatever reason, that account wasn't there, so I have set the permissions to everyone to have full access but that was only on rare occasion.