Can view everyone's folder and data , IIS 6 -- iis ftp

djiss NO[at]SPAM djiss.com
7/2/2004 2:42:24 PM

Hey guys, check this out. I have a 2003 server setup with IIS 6 and i
setup a couple of virtual folders.

when i login with say user A it drops him to user A folder, which is
should

the odd thing is this

using an ftp software like bulletproof and cuteftp if i log in with
user A not administrator, it drops me to the root of the server and i
can see everything.

funny thing, i cannot upload or download or delete....but i can view
it all

only seems to be happening to a 2003 iis 6 environment.

any help would be appreciated.

Thanks

Paul Lynch
7/3/2004 5:43:09 PM

[quoted text, click to view]

That's normal behaviour. You can prevent this from happening by
employing User Isolation. Read about it here :

http://www.microsoft.com/resources/documentation/IIS/6/all/techref/en-us/iisRG_CFG_21.mspx

Regards,

Paul Lynch

iis ftp : Can view everyone's folder and data , IIS 6