The Link-problem is probably because you need to add "*"-mapping to your web site. In the ISS, go into the Configuration. Add "*" as a file extention and map it to "c:\Windows\Microsoft.NETFramework\v2.0.50727\aspnet_isapi.dll". Uncheck the box "Check that file exists" and save the new mapping. Note! There is a bug in the IIS-interface that makes it hard to activate the "OK"-button. You need to tab around a little bit in the interface to be able to save the new mapping. Regarding the security problem there could be several problems, hard to identify based on the information provided. One recommendation to get around this, is though to add a new user to the SQL Membership Provider within the ASP.NET environment (or inside admin mode of EPiServer), before you move the database to your IIS-installtion. Give the new user access to the Administrators and WebAdmins-groups. You could also temporarily try to give all users access to the UI folders, changing the settings in the web.config-file (remove ).