Configuration fails with error "Could not access the configuration file. You can only access this page if you have write access to the configuration file."

This error message may occur in either of the following situations:

• The user account used to access the configuration page does not have sufficient permissions to write to the Virtual Directory.
• The user account has sufficient permissions, but Microsoft Internet Explorer is run on the same computer that hosts ITP/OnLine, and it is running in Protected Mode.
• The user account has sufficient permissions, but Microsoft Internet Explorer is run on the same computer that hosts ITP/OnLine, UAC is enabled, and the file system permissions are not configured using a separate ITP/OnLine administrators group.

These situations will be discussed separately below.

Protected Mode

When Microsoft Internet Explorer is running in Protected Mode, the status bar will display the text "Protected Mode: On". This situation can only occur on Microsoft Windows Server 2008 or up, since Microsoft Internet Explorer supports Protected Mode only on these platforms. To resolve this situation, Protected Mode should be disabled for Intranet sites:

1. Open Microsoft Internet Explorer as Administrator. This is done by right clicking on the Internet Explorer icon and selecting "Run as Administrator".
2. Go to the Tools menu and select "Internet Options".
3. In the Internet Options dialog, go to the tab "Security".
4. Select the "Local intranet" zone.
5. Turn off the check box "Enable Protected Mode."
6. Press the "OK" button to close the Internet Options window.
7. Restart Microsoft Internet Explorer.

Note

By default, Microsoft Internet Explorer 7 and 8 disable the "Local intranet" security zone. The fix described above only works when the "Local intranet" security zone is enabled.

Permissions

If the error message occurs when Protected Mode is disabled, then the user does not have enough permissions to write to the file "config.xml" in the Virtual Directory. There are two common causes for this problem. The first cause is that the user is not a member of the local Administrators group of the server computer, and is also not in the ITP/OnLine administrators group. This can be resolved by using a different user account, or by adding the user account to the appropriate group. The second cause is that the file system permissions have been misconfigured. Verify that the file system permissions are configured as specified in Section Setting file system authorizations.

User Account Control (UAC)

When the Microsoft Windows installation has User Account Control (UAC) enabled, members of the local Administrators group are not automatically allowed to configure ITP/OnLine. In this situation, it is required that ITP/OnLine administration is configured using a separate ITP/OnLine administrators group, as described in section Setting up an ITP/OnLine administrators group.