The configured user for this application pool does not have sufficient privileges to run CGI applications

SYMPTOMS

You are using "Advanced Security Authentication" combined with FastCGI on Windows 2008 R2.
After setting FastCGI and setting of the standard authentication for advanced security on ZyNET.exe and ZyNETLogin.exe, the attempt to open the web client is replied with: "HTTP Error 403.19 Forbidden -
The configured user for this application pool does not have sufficient privileges to run CGI applications".

You also notice multiple zynetsessionserver processes active in the Windows Task Manager.

CAUSE

This is related to insufficient privileges for the configured user to perform the required FastCGI actions.

RESOLUTION

• Go to 'Local security Policy' in the Window Server Administrative Tools
• Select 'Replace a process level token' under 'User Rights Assignment'
• Ensure to associate this to a valid user account that you wish to associated with the FastCGI actions.
• Subsequently select 'Adjust memory quotas for a process'
• Ensure to associate this to a valid user account that you wish to associated with the FastCGI actions.
• Ensure to restart Internet Information Services

APPLIES TO

6.2; 6.2 Service Pack 1; 6.2 Service Pack 2; 6.3