I'm not sure if this is new, but when an IHttpHandler.ProcessRequest method throws an exception like this: throw new HttpException (401, "Forbidden"); the server isn't returning the correct code/message. =20 Also, it seems that setting context.Response.StatusCode has no effect. =20 Piers.