PRB: Event 4097 Error Message When You Visit Your Commerce Server 2002 Site That Uses Windows Integrated Authentication

When you unpack your new site, and then visit your site, you receive the following error message in Internet Explorer: In the Event Viewer, the following event appears in your application log: When you use an error lookup utility for 80040E4D, the utility notes that this HResult is an authentication failure. The utility report appears as follows:

When you unpack your site, the connection strings to your databases are automatically configured to use Windows Authentication. The Windows account through which you gain access to the site does not have the appropriate SQL Server access permissions.

You have to configure the appropriate Windows accounts to have SQL Server access permissions. For complete information about how to do this, see the following topics in the Commerce Server 2002 product documentation:

• Securing Commerce Server Databases
• Deploying Commerce Server Using Windows Authentication

These topics give you the steps that you must perform to install Commerce Server using Windows Integrated Security, and to secure your services and databases to use Windows Authentication. These topics are not specific to a particular deployment scenario.

To download the latest documentation, visit the following Microsoft Web site: You can also view the following white paper, which provides detailed instructions for how to deploy Commerce Server 2002 in a secure configuration:

This behavior is by design.

After you unpack your Commerce Server 2002 site by using Windows Integrated authentication, you receive the following message: Commerce Server 2002 generates this message to let you know that you have just unpacked your site by using Windows Integrated authentication and that you must manually configure access permissions on the accounts that will have access to the application or applications that you have unpacked.

It is strongly recommended that you use Windows Authentication for access to your databases. When you configure your database connection strings for Windows Authentication, you must assign the appropriate access to your databases for design-time users and for run-time users. A Business Desk user uses a design-time account. The visitors to your Web site use run-time user accounts (anonymous domain accounts).

NOTE: The topics mentioned in the "Resolution" section explain the permissions that the design-time users and the run-time users must have to gain access to the databases. If you do not do this, an "out-of-the-box" site produces the behavior that is described in the "Symptoms" section.