Groups | Blog | Home
all groups > iis ftp > november 2004 >

iis ftp : Setting Account Access by Folder


mlaufer NO[at]SPAM srg.com
11/2/2004 3:25:29 PM
We have a win2k3 server running IIS. We use FTP to share files with
clients, vendors, and remote employees/freelancers.

We would like to start using specific users account to limit ftp users
access to only specific folder(s) they need. What is the best way to
do this?

Thanks,

Bernard
11/3/2004 10:40:05 AM
Since you are using IIS6.0, you can configure user isolation.
http://www.microsoft.com/resources/documentation/IIS/6/all/techref/en-us/iisRG_CFG_21.mspx

and
How To Set Up Isolated Ftp Site
http://support.microsoft.com/?id=555018

--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



[quoted text, click to view]

Fernie
11/7/2004 5:13:05 PM
Hello Bernard,

Using IIS 5, is it possible to setup ftp so that various webmasters (with
his own domain) on my server can modify and view his own website even though
all domains share a single IP?

I've read that this type of isolation is supported by IIS 6 but
unfortunately, I have IIS 5 and I recently got rid of a whole bunch of
dedicated IPs and started using host headers in order to share a single IP.
At the moment, people cannot edit their pages as I am looking for a
solution.

I'd prefer to strickly use IIS but am thinking of evaluating WS_FTP Server
but would prefer to avoid additional expenses. Is it fairly trivial to
obtain isolation with IIS 5 ftp services? Is it reliable? I'm a little
confused because I've read that some people have problems where other users
can see all of the domains and that is very undesireable to me.

Thank you very much for your assistance.

Best Regards,

Fernie



--

Bernard
11/8/2004 12:11:33 PM
For IIS 5, you can create virtual directory and redirect user to their own
folder.
configure with STRONG NTFS permissions, you should be able to restrict
access.

How To Set Up an FTP Site So That Users Log Onto Their Folders
http://support.microsoft.com/?id=201771

note: the kb uses physical directory, you can configure the respective
permission on the physical folder, however you create a virtual directory
(by default hidden) and mapped it to the web path.

e.g.
ftproot -> e:\ftpfake
webroot> f:\websites\site1
site2

ftp virtual directory - say site1 owner is 'ali', you create a virtual
directory
ftp vir dir 'ali' -> f:\websites\site1


--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



[quoted text, click to view]
http://www.atozedsoftware.com

AddThis Social Bookmark Button