Need some adivce on FTP permissions

[TiggerDaKat]

I am trying to setup an FTP server but am having problems getting the permissions to work.
I am creating about 8 users which need outside access to the FTP server. They will not be logging into the LAN.
When they try to login, it denies them access unless I make them part of the administrator group. Then I can login ok. After I take them out of the administrator group....they can still continue to login....why would that be?
What rights should I set these users so that they can login to the ftp server.
Also, I'd love for these users to be put into a specific directory only once they login. They should not be alowed to go into any other directory.
Any advice would be apprecited.

Thanks so much everyone.

 

[JeffHicks]

Microsoft FTP requires the logon locally right. I would make an FTP Users group on that server and grant it that right. You could then add the users to the group.

 

[GFAlexander]

You need to make sure the individual users have the logon locally rights to enable them to logon via FTP.

Administrators automatically have logon locally rights, which is why that works. Not sure why they still work after you've removed them from the admin group.

If you get an answer on keeping them to one directory, I need to know that too.

Regs

Gary Alexander

 

[hewissa]

What I did for my users was this:

Created a root folder on the ftp server and set NTFS permissions on that folder. Created the user folders within the root. Set permissions on that.

On the FTP server I removed anonymous logon and placed the users in the FTP Operators list. I enable the Logon Loaclly right.

Under home directory list the folder created on the FTP server. The NTFS permissions will take over from there.

You can also set up IIS to use Pass Through Authentication to allow users to access their folders.

http://www.iisanswers.com/articles/enablepassthrough.htm

Hewissa

MCSE, CCNA, CIW

 

[Seaspray0]

When granting the logon locally right, make sure you set it in the appropriate GPO. I've seen people apply it at the domain level and wonder why it doesn't work. Its because the domain controllers GPO on the Domain Controllers OU will overwrite that setting (last GPO applied takes precidence if the policy if specified).