I am trying to monitor multiple intranet urls that return a 403 unauthorizedaccess response...which is the correct response, but I can not seem to find where to tell the SAM that this is a correct response and thus an up. any suggestions?
400 errors in almost all cases are indicative of an issue or problem that should be addressed. I say almost because your use case is obviously an exception. I recommend using the TCP Port Monitor for port 80 instead of the HTTP User Experience Monitor since this component monitor type doesn't honor HTTP error status codes.