Console users are unable to add users to a security role due to "HTTP Error 404.15 - Not Found" page being returned

Products

• Management Platform (Formerly known as Notification Server)

Issue/Introduction

When attempting to add users to a security role the following error page (or something similar to it) is returned

HTTP Error 404.15 - Not Found The request filtering module is configured to deny a request where the query string is too long.

Module	RequestFilteringModule
Notification	BeginRequest
Handler	PageHandlerFactory-ISAPI-2.0-64
Error Code	0x00000000

Requested URL	http://localhost:80/Altiris/NS/ItemListView.aspx?&Url=http%3a%2f%2flocalhost%2fAltiris%2fConsole%2ftree.aspx%3fTreeGuid%3da57fb0e9-0676-4e00-929a-6bb37dc1f888%26RootNode%3d2f8d24ec-77cf-4db3-980c-03e7022cf19d%26%26ConsoleGuid%3d1b22db4e-a898-443f-9b99-855b1653d3f5&TreeGuid=a57fb0e9-0676-4e00-929a-6bb37dc1f888&RootNode=2f8d24ec-77cf-4db3-980c-03e7022cf19d&ParentGuid=00000000-0000-0000-0000-000000000000&ItemGuid=2f8d24ec-77cf-4db3-980c-03e7022cf19d&ConsoleGuid=1b22db4e-a898-443f-9b99-855b1653d3f5
Physical Path	C:\Program Files\Altiris\Notification Server\Web\ItemListView.aspx
Logon Method	Not yet determined
Logon User	Not yet determined

 

Cause

When the option to select to add members to the role is selected the picker will pull all current members (their Guids) and pass them in so that they can be excluded from the current selection window (because they are already members). When the membership reaches 55 it will cause the string of Guids it is passing in to be too long to be handled by IIS's pre-set parameters.
 

Resolution

Run the following command on the SMP server to extend the IIS maximum:

%systemroot%\system32\inetsrv\appcmd.exe set config /section:system.webServer/security/requestFiltering /requestLimits.maxQueryString:"6074" /commit:apphost

This setting can also be changed (and the current setting viewed) by doing the following:

* Open IIS Manager
* Browse down to "Default Web Site"
* In the Features View, in the right pane, under IIS, double-click on "Request Filtering"
* In the far right pane select the "Edit Feature Settings..." link.
* The value in the bottom box "Maximum query string (Bytes):" is the value to change.

If, after changing the max query  string to a higher value, the error still occurs then try a higher value until the error goes away.

 

Applies To

SMP 7.1 SP2