How to set User Permissions? 3

[Ovatvvon]

In NT 4 it was easy to set user permissions on any folder. You could simply right click on the folder, go into properties and hit the permissions and designate who specifically had access to that folder and what they could do with it.

This feature seams to be gone with Windows 2000 Server (from what I can tell). I want to limit the people who are FTPing into it from accessing each other's folders. For instance, I have the main FTP folder called somthing like ftproot. Within that folder I have user1, user2, and user3. If any one of those users logs in with FTP, it'll automatically forward them to their folder. However, they can simply navigate up to the root folder and go into any other user's folder in WS_FTP along with just about any other program I'd imagine.

How can I keep them from entering into the other users' folders? -Ovatvvon :-Q

 

[dankelt]

Right-Click on folder, Properties, Security Tab.

 

[Ovatvvon]

I do not have a security tab. I did in NT 4, but in Win2k Server I only have General, Web Sharing, and Sharing. Under Web Sharing and Sharing I have them both set to Not Share.

That doesn't keep other users from accessing those files when they login though. -Ovatvvon :-Q

 

[GrnEyedLdy]

Ovatvvon,

If you are not using NTFS, you will not have a Security tab. It's simple enough to convert to NTFS, if you want to.

The command is: Convert driveletter: /fs:ntfs

For example, to convert drive D: to NTFS, you would open a command prompt and type...

Convert D: /fs:ntfs

If the drive you are converting is the System drive, a re-boot will be required, otherwise it will not.
You cannot reverse this process.

Hope this helps,

Patty

 

[Ovatvvon]

ah, alas, it is my own ignorance. lol

Thank you both. -Ovatvvon :-Q

 

[GrnEyedLdy]

Ovatvvon,

Glad to be able to help...I learn something new everyday about Win2K myself.

Patty

 

[Ovatvvon]

ok. I have it now so the users log in for FTP. When they hit the root folder, it sends them to their specific folder based on their login name. However, they can still go up one folder, and while they can't enter another users folder, they can still see their user names.

How can I prevent them from viewing the root FTP folder to see others account names, but still have access to it to be able to be forwarded to their own folder? -Ovatvvon :-Q

 

[GrnEyedLdy]

I don't believe you can.

Patty

 

[Ovatvvon]

That stinks. Guess the only way to do that is to use seperate IP's for FTP'ing. I don't want to do that though. So I guess I just have to stick with this setup for now.

Thanks for your help!! -Ovatvvon :-Q

 

[dankelt]

Sure you can do it. I'm assuming you created Virtual Directories for all your users. All you have to do to not allow them to see other users is set your FTP server to point to an empty root, or don't put the user's folders in the root folder, put them some place else. Hope this makes sense!

Dan

 

[Ovatvvon]

dankelt,
that's even closer to what I wanted. Thank you!

Do you know if there's a way to keep them from even navigating to the root folder? I just know there's going to be some people that hit the navigate up-one-level arrow and see a blank screen and won't figure out all they have to do is type in their user id.

If there were a way to even keep them from going into that folder, but would still let the system sort them out from that folder when they logged in. That would be the ideal setup for me. Do you know if there is a way to do that? -Ovatvvon :-Q

 

[dankelt]

What do you think this is... a UNIX system

Off hand I don't know if there is a way to do that. If you have your users use Internet explorer (I know, it sucks) they will not have the option of going up a level (if they do go up a level, it just shows them their home directory). Perhaps there is another ftp client out there that will act the same as IE and interpret the root as the home directory.

 

[Ovatvvon]

Alright. I'll do some more research. But what you've given me so far I can be happy with. The further refining of the setup would just make it ideal.

Thank you! -Ovatvvon :-Q