"Ned" <Ned@discussions.microsoft.com> wrote in message
news:91F5028A-92FE-4D79-B5BA-226FA7E55C76@microsoft.com...
>I think I already know that what I'm requesting is impossible, but I
>thought
> I should ask in case I'm wrong ;)
>
> A client has requested an anonymous ftp site (IIS6). I told them it would
> have to be read-only, I don't want anonymous users reading and writing,
> because otherwise the site would be used for nefarious purposes. But they
> asked if it is possible to make a subfolder writable by the anon user, and
> have this subfolder have a size quota, so that if it were subverted at
> least
> the entire volume wouldn't be filled up.
>
> As far as I know in win2003, storage quotas are configured for a volume
> (not
> a folder), on a user-by-user basis. Furthermore, I know of no way to
> specify
> a different anon user for a subfolder from the one at the root (because if
> I
> could just use a different anon user in the folder, then my problem would
> be
> solved and I'd apply a quota against that user only).
>
> Is this all correct or is there some special workaround that I'm not aware
> of?
>
> Thanks.
>
> -- Ned

"Alun Jones [MSFT]" wrote:

> The obvious workaround would be to create a new partition, of a small size,
> and have the directory be a virtual directory that pointed to the new
> partition.
>
> Partition size limits are as absolute as any quota I can think of.
>
> But you might want to ask your customer if that's really the best scenario -
> after all, if the warez banditz go after his FTP server, he's reached the
> situation where his bona-fide customers are frozen out of uploading to the
> upload directory.
>
> A better solution is to have a specific (non-anonymous) user name and
> password that is used only for uploads. Change the password weekly or so,
> and give it out to those customers that need to upload.
>
> Alun.
> ~~~~
> --
> Software Design Engineer, Internet Information Server (FTP)
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "Ned" <Ned@discussions.microsoft.com> wrote in message
> news:91F5028A-92FE-4D79-B5BA-226FA7E55C76@microsoft.com...
> >I think I already know that what I'm requesting is impossible, but I
> >thought
> > I should ask in case I'm wrong ;)
> >
> > A client has requested an anonymous ftp site (IIS6). I told them it would
> > have to be read-only, I don't want anonymous users reading and writing,
> > because otherwise the site would be used for nefarious purposes. But they
> > asked if it is possible to make a subfolder writable by the anon user, and
> > have this subfolder have a size quota, so that if it were subverted at
> > least
> > the entire volume wouldn't be filled up.
> >
> > As far as I know in win2003, storage quotas are configured for a volume
> > (not
> > a folder), on a user-by-user basis. Furthermore, I know of no way to
> > specify
> > a different anon user for a subfolder from the one at the root (because if
> > I
> > could just use a different anon user in the folder, then my problem would
> > be
> > solved and I'd apply a quota against that user only).
> >
> > Is this all correct or is there some special workaround that I'm not aware
> > of?
> >
> > Thanks.
> >
> > -- Ned
>
>
>