If you are getting an error “403 forbidden” when trying to access Remote Web Workplace (RWW), here are some settings to check. This if for systems running Microsoft Small Business Server 2003 (SBS).

1. The correct Authentication Methods for the /Remote virtual directory security are:

   1. Enable anonymous access. Connect as the IUSR_ account.
   2. Enable Integrated Windows Authentication.

2. Also in the virtual directory security tab, in the secure communications section, click edit, and check that Require secure channel (SSL) and Require 128-bit encryption are checked.

3. On the ASP.NET tab, ensure that the ASP.NET version is 1.1.4322

Finally, on the Documents tab. Ensure that enable default content page is checked, and add default.aspx to the list if it is not there. This step was the solution for my situation.