HTTP Error 401.2 - Unauthorized You are not authorized to view this page due to invalid authentication headers


i want to allow access to Anonymous.aspx page to all user, i have set Basic Authentication to Enabled, and Connect as to specific user.

my problem is when trying to access http://MyIPAddress/MyAlias/Anonymous.aspx, authentication popup appears--ideally it shouldn't, and when i close popup, getting 401.2 Unauthorized error--it's obvious

Error Summary

HTTP Error 401.2 - Unauthorized You are not authorized to view this page due to invalid authentication headers. Error Code 0x80070005

below is snap of my web.config file.

       <authentication mode=“Windows“/>

   <location path=“Anonymous.aspx“>
              <allow users=“*“/>

how can i solve this error.

asked on Stack Overflow Feb 6, 2014 by BrainCoder • edited Feb 6, 2014 by BrainCoder

5 Answers


Make sure Anonymous access is enabled on IIS -> Authentication.

But also right click on it, then click on Edit, and choose a domain\username and password. (With access to the physical folder of the application).

answered on Stack Overflow Aug 29, 2014 by Oscar Ortiz • edited Nov 14, 2016 by jpkeisala

Open Project properties by selecting project then go to

View>Properties Windows

and make sure Anonymous Authentication is Enabled

enter image description here

answered on Stack Overflow Aug 20, 2018 by TAHA SULTAN TEMURI

Old question but anyway !

Same thing happen to me this morning, everything was working fine for weeks before...... yes guess what ... I change my windows PC user account password yesterday night !!!!! (how stupid was I !!!)

So easy fix : IIS -> authentication -> Anonymous authentication -> edit and set the user and new PASSWORD !!!!!

answered on Stack Overflow Jun 14, 2016 by Nikita Yo LAHOLA

I had the same issue, and spent quite a bit of time trying to track down the solution. I had Anonymous Authentication set up at two different levels with two different users. Make sure that you're not overwriting your set up at a lower level.

answered on Stack Overflow Nov 14, 2016 by brrrrth

I had not checked the Authorization header was set correctly in my request. I actually had Authentication which is not right.. Make sure you check the initiator!

answered on Stack Overflow Mar 31, 2021 by Jimenemex

User contributions licensed under CC BY-SA 3.0