Controlled FTP Site - HowTo

[RichS]

Useing
IIS 5
Windows 2000 Server
Active Directory
Network Address Translation on the router
(probably don't need to know this)

The requirement:
I need to set up an FTP site. The FTP site has to allow only Domain Users access (read and write) to the Virtual directories with in the FTP site so no Anonymous login. I want a login box to popup so the the user can enter their credentials to gain access.

So far I have:
Successfully set up an FTP site that users can read and write to but so can the world. So then I took out the Anonymous and used only users and groups from the active directory structure on the virtual directory and the site security. But none of these are able to gain access.

If some can descibe what I need to do to get this running I would appreciate it. If there is a How-To or FAQ that would be good also.

(I have tried the recommendations that I have found on other posts in this forum, but I am unsuccessfull so far.)

Thanks

 

[rjs]

After you removed Anonymous from the FTP security, did you give the users rights to the actual directories the virtual dirs point to? Use Windows Explorer or My Computer to assign rights to the directories for those users.

 

[RichS]

rjs, thanks for the reply. I altered the permissions in the Windows explorer on the directory (the one I am using as virtual) to give the selected group read/write privileges. Also I give all privileges to the admin of the local server and domain admins.

 

[DakotaKid]

I'm having similar problems and would love some type of FAQ on FTP Servers. The Microsoft docs that come with IIS don't help at all.

I'm not sure what client you are using to attempt connection with the FTP server, but if you're using a regular IE browser (as opposed to a purpose built FTP client), then this might help:

Add the account name into the FTP URL like this:

ftp://yourname@ftp.yourdomain.com/virtualdirectory.

I'm trying to figure out how these parameters passed through a URL correspond to the parameters inside a dedicated FTP client (I'm using Cute FTP).

And I'm trying to figure out how specific logins can be tied to a specific virtual directory, such that they don't have to type the virtual directory at the end. I've seen it done on IIS (my ISP does it but they won't tell me how).

 

[DakotaKid]

I found my answer. Hope this helps you as well:

This may be helpful to you and comes from MS article:

http://www.microsoft.com/technet/tr...net/prodtechnol/iis/deploy/instgd/iischp9.asp

Setting Read and Write Permission
Read permissions is set to all directories by default. Remove Read permission and set Write permission to create a dedicated directory to which users can copy files, but cannot see any files left by others.

Setting Write permission will allow users to leave files on your computer.

You must set Read and Write permission by using Internet Service Manager. On NTFS drives you must also set matching permissions by using File Manager.

Creating Annotation Files
Each directory can contain an annotation file, which can be used to summarize the information that the directory contains. This summary appears automatically to remote browsers.

You can add directory descriptions to show FTP users the contents of a particular directory on the server. This is done by creating a file called ~ftpsvc~.ckm in that directory. Usually you want to make this a hidden file so that directory listings do not display it.

Special Directories in the Home Directory
You can add special directories to the home directories to control the root directory displayed to FTP users. These directories must be physical subdirectories; they cannot be specified by using virtual directories.

Using Username Directories
Username directories are directories in the home directory with names that match a username. If a user logs on with a username that has a matching directory in the home directory, that directory is used as the root.

You can use FTP username directories to control the root directory presented to users. FTP username directories are not created by default during setup.

Using the Anonymous Directory
The Anonymous directory is a directory in the home directory named "Anonymous". If a user logs on using the password Anonymous, the directory name Anonymous is used as the root.

You can use FTP username directories to control the root directory presented to users. FTP username directories are not created by default during setup.