Home
Products
Updates
Logs
Bugs
Files
Sign In Create an Account
Recent Search Results
No Search results are currently available to display.

Your last search results will be displayed here for the duration of your browser session.

Log ReportPrint
Template General
Log Name httperr.log
Type Error
Source IIS
Entry ID 400
Average Threat Rating
Add Your Encounter Hide Encounters without Resolutions
joverland
Posts: 41

12/21/2010
Revision 4
Threat Rating:

Contains Resolution:
HTTP 400 - Bad Request (Request header too long) is displayed in the browser after accessing an IIS website that uses Windows Integrated Security and the user has a large number of security groups.  The number of groups can vary, but you will be at risk with over 100.  We have users with over 200 and they all would recieve it if we had not increased the MaxFieldLength and MaxRequestBytes registry settings.  Since it was our intranet we set the values to there max limit but you may want to consider something less.  

Here are the regisry settings you will need to create to resolve this issue:

HKLM\System\CurrentControlSet\Services\HTTP\Parameters\MaxFieldLength:65534

HKLM\System\CurrentControlSet\Services\HTTP\Parameters\MaxFieldLength:16777216

Both keys are DWORDS and the values are in Decimal units.

IMPORTANT: You must reboot for the settings to take effect. Many hours have been wasted because IISRESET and service restarts do not cut it.

REF: http://support.microsoft.com/kb/2020943



Peer Reviews (0)

No reviews have been post for this Encounter

Post a Peer Review: