Hi,

We have MOSS 2007 installed on a Windows Server 2008 Standard Edition and 
running for 6 months.
Our users suddenlly started to get the HTTP Error 403 - Forbidden.
The problems appeared after 3 Windows Server 2008 hot fixes applied. I 
uninstalled them, without success.
Tried to reinstall .NET 2.0.

The error shows up even logging with a domain admin account.

On Event Viewer, I found the Event Code: 4011 error on application log:

Event code: 4011
Event message: An unhandled access exception has occurred.
Event time: 12/02/2010 10:48:18
Event time (UTC): 12/02/2010 12:48:18
Event ID: 0291b0c0e1e44edfbc64c781e61444b4
Event sequence: 114
Event occurrence: 3
Event detail code: 0

Application information:
Application domain: /LM/W3SVC/465207244/ROOT-1-129104512675921872
Trust level: WSS_Minimal
Application Virtual Path: /
Application Path: 
C:\inetpub\wwwroot\wss\VirtualDirectories\intranet.mycompany.com\
Machine name: MOSS1

Process information:
Process ID: 5836
Process name: w3wp.exe
Account name: MYCOMPANY\WSS_SERVICE

Request information:
Request URL: http://intranet/Paginas/default.aspx
Request path: /Paginas/default.aspx
User host address: 192.168.70.10
User: MYCOMPANY\Administrator
Is authenticated: True
Authentication Type: Negotiate
Thread account name: MYCOMPANY\Administrator

IIS 7.0 Logs also registers 403 errors for my users.

Does someone knows a sollution?

Thanks.

Adriano. 

------=_NextPart_0001_B54E8812
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

"Authentication Type: Negotiate" says you're running kerberos 
authentication for the site. 

Did you check if the spn's are creating any problems? Are there failure 
audit's in the event viewer?

http://www.windowsecurity.com/articles/Troubleshooting-Kerberos-SharePoint-e
nvironment-Part1.html
http://www.windowsecurity.com/articles/Troubleshooting-Kerberos-SharePoint-e
nvironment-Part2.html

Harish K
------=_NextPart_0001_B54E8812
Content-Type: text/x-rtf
Content-Transfer-Encoding: 7bit

{\rtf1\ansi\ansicpg1252\deff0\deflang1033{\fonttbl{\f0\fnil\fprq2\fcharset0 MS Sans Serif;}}
\viewkind4\uc1\pard\f0\fs20 "Authentication Type: Negotiate" says you're running kerberos authentication for the site. 
\par 
\par Did you check if the spn's are creating any problems? Are there failure audit's in the event viewer?
\par 
\par http://www.windowsecurity.com/articles/Troubleshooting-Kerberos-SharePoint-environment-Part1.html
\par http://www.windowsecurity.com/articles/Troubleshooting-Kerberos-SharePoint-environment-Part2.html
\par 
\par Harish K
\par }
------=_NextPart_0001_B54E8812--