Handling Custom Error 401.2 (Re-visited)

---This is a continuation of a previous thread that's gotten a little stale. ---

Hi Elguaro,

In my original post (http://forums.aspfree.com/showpost.php?p=100206&postcount=5) I gave a technique for overriding the default 401.2 error (one of the few that ASP.NET doesn't allow us to customize via web.config). You asked:


You are getting the network password dialog because your error page is using the same security settings that the rest of your application is and, if you're not allowing this person access to the rest of your site, you're not allowing them access to your error page either.

I should have mentioned that in my original post (sorry, but I was a little out of it by then). To override your security settings and allow anyone to view your error page(s) I recommend the following:

1. Create a folder called "errors" underneath your application's root folder.
2. Add the following to your web.config file inside the <configuration> tags
   
   <location path="errors" allowOverride="true">
   <system.web>
   <authorization>
   <allow users="*" />
   </authorization>
   </system.web>
   </location>
3. Be careful that you don't create any security issues by exposing the pages in this folder (i.e. error pages that might display information that a hacker or malicious user might find useful. If you want to be extra cautious, you can modify the <location> tag above so that it only overrides the security settings for your single error page.

That should do it!

Cheers,

John