A critical vulnerability was discovered in React Server Components (Next.js). Our systems remain protected but we advise to update packages to newest version. Learn More

Hiep Le
Mar 17, 2022
  3161
(1 votes)

Create admin account without given access to CMS

Ever encountered a situation you are asked to take over a project to maintain it, you are given database backup & source codes but someone forgot to tell you the admin account to login CMS?

Fret not. If you are using CMS version 11 or ealier, edit your web.config to allow anonymous access to the CMS by updating the following sections:

1. Under <location path="EPiServer">

update from <deny users="*" /> to <allow users="*" />

2. Under <location path="EPiServer/CMS/admin">

update from <deny users="*" /> to <allow users="*" />

You now can access the CMS at http://your-site/EPiServer/CMS/Admin/Default.aspx

Go in and create your admin account and you're all set!

Mar 17, 2022

Comments

Scott Reed
Scott Reed Mar 17, 2022 11:49 AM

I would suggest updating the intro to this just to explain this is for pre CMS 12. As in current version which is .NET 5 there is no web config 

Hiep Le
Hiep Le Mar 18, 2022 04:44 AM

Thanks for your insight Scott. Updated :)

Devsina
Devsina Oct 17, 2023 02:15 PM

Thank you, saved me sometime!

Hiep Le
Hiep Le Oct 19, 2023 06:42 AM

Devsina, it's great that it could help you!

Please login to comment.
Latest blogs
Beginner's Guide for Optimizely Backend Developers

Developing with Optimizely (formerly Episerver) requires more than just technical know‑how. It’s about respecting the editor’s perspective, ensurin...

MilosR | Dec 10, 2025

Optimizely PaaS Administrator Certification : Free for Everyone

Optimizely has recently launched a free PaaS Administrator Certification. https://academy.optimizely.com/student/activity/2958208-paas-cms-administ...

Madhu | Dec 9, 2025 |

Fixing TinyMCE Initialization Failures in Optimizely CMS: A Hidden Pipeline Issue with .NET SDK Versions

Over the past few weeks, several Optimizely CMS projects began experiencing a puzzling failure: XHtmlString fields stopped initializing TinyMCE in...

Francisco Quintanilla | Dec 9, 2025 |

Jhoose Security Modules v2.6.0 — Added support for Permissions Policy and .NET 10

Version 2.6.0 adds Permissions Policy header support, updates to .NET 10, improved policy management, configurable security settings, and enhanced...

Andrew Markham | Dec 6, 2025 |