Digging into each ASPX page returning a specific error code.

We used this script at a customer to get the pages with most 401 errors and also checked pages with most hits. You’ probably find these to be almost the same list. If you have Windows Authentication and your domain used NTLM instead of Kerberos this is why. Each page request will give your about 4-5 of the 401’s in the log for each page hit. If your users in other parts of the world (far from your servers) complain about performance and none of the others do, maybe latency is the problem.

SELECT
    TOP 20 cs-uri-stem,
    sc-status,
    Count(*) AS Total
    INTO TOP20PagesWith401.txt
FROM
    logs\iis\ex*.log
WHERE
    TO_LOWERCASE(cs-uri-stem) LIKE '%.aspx'
    and sc-status=401
GROUP BY
    cs-uri-stem,
    sc-status
ORDER BY
    Total,
    cs-uri-stem,
    sc-status
DESC

Oh.. I almost forgot. If you enable anonymous access on e.g. image folders you should see a large drop in nr of 401’s.

Hope this helps? Happy log file digging :)

//Anders