This article will walk through resolving a common reason for the error "(403) Forbidden" when creating a distribution package with an http path for the primary file.
Directory browsing not enabled in IIS for virtual directory.
Validate this by opening a web browser on the machine hosting the primary file, enter the path into the URL bar, and you will get HTTP Error 403.14 - Forbidden.
Enable directory browsing by selecting the virtual directory under Default Web Site in IIS.
Note: Reference the following Microsoft support document on HTTP status codes if get get a different error besides 403.14 in a web browser.