FTP service bypass NTFS permissions on DC -- iis ftp

Darren H Gill
8/26/2004 10:29:05 AM

We have several small offices linked by VPN. These offices have a single
Domain controller server which is also the branch office file server.

The Files in the shares have restrictive NTFS permissions set, in some
cases to a single user with even Domain Admins having no permissions on the
ACL

Because UNC file access is really slow over our VPN WAN I set up FTP
services on a non-default port for each server to allow head office
usersaccess to the branch files.

This seemed great, file access rate was vastly improved, however, it was
quickly discovered that users could access files and folders that they had
no rights to.

Any suggestions?

Darren Gill

jeff.nospam NO[at]SPAM zina.com
8/26/2004 11:59:34 AM

On Thu, 26 Aug 2004 10:29:05 +0100, "Darren H Gill"
[quoted text, click to view]

Check permissions for the FTP account being used. You don't mention
operating system version, but if you look at the docuemntation for
your version you'll see how to limit access.

iis ftp : FTP service bypass NTFS permissions on DC