|
|
You're in the
iis ftp
group:Limiting FTP User Access
iis ftp:
question here, since no on on the embedded newsgroup knows the answer. We have the IIS FTP server setup to allow us (the manufacturer) full access to the C: drive using the Administrator account. In addition to this we would like to setup FTP for the end-user to a specific directory only. How do I do this with the IIS FTP server? Everything I've
On Thu, 17 Mar 2005 07:51:06 -0800, "Chris Rose"
[quoted text, click to view] <ChrisRose@discussions.microsoft.com> wrote: >I come from the XP Embedded newsgroup, and it's been suggested to ask this >question here, since no on on the embedded newsgroup knows the answer. > >We have the IIS FTP server setup to allow us (the manufacturer) full access >to the C: drive using the Administrator account. >In addition to this we would like to setup FTP for the end-user to a specific >directory only. How do I do this with the IIS FTP server? Everything I've >tried ends up giving the user account full access to the C: drive. NTFS permissions.
Setting permissions keeps the limited user from logging in because the FTP
root shares the entire c:\ drive. I set up a virtual directory for the use that I want to have limited access and set a path to be a subdirectory on the c: drive such as c:\limited_user, but since NTFS permission prohibit the limited user from access to c:\ then the user gets rejected when FTP'ing in to the box. [quoted text, click to view] "Jeff Cochran" wrote:
> On Thu, 17 Mar 2005 07:51:06 -0800, "Chris Rose" > <ChrisRose@discussions.microsoft.com> wrote: > > >I come from the XP Embedded newsgroup, and it's been suggested to ask this > >question here, since no on on the embedded newsgroup knows the answer. > > > >We have the IIS FTP server setup to allow us (the manufacturer) full access > >to the C: drive using the Administrator account. > >In addition to this we would like to setup FTP for the end-user to a specific > >directory only. How do I do this with the IIS FTP server? Everything I've > >tried ends up giving the user account full access to the C: drive. > > NTFS permissions. > > Jeff
By Virtual Server, do you mean Virtual Directory?
[quoted text, click to view] "Jason Brown [MSFT]" wrote:
> I'd be inclined to have two virtual server instances, one for each purpose, > however I'm not sure it's a great idea to have you entire C: drive exposed > over FTP - which isn't a particularly secure protocol in its default state. > Is there a particular reason you're doing this? > > > -- > Jason Brown > Microsoft GTSC, IIS > > This posting is provided "AS IS" with no warranties, and confers no rights. > > > "Chris Rose" <ChrisRose@discussions.microsoft.com> wrote in message > news:3E0B6ED5-2FAD-4E33-81B7-AFEB27A1F70F@microsoft.com... > >I come from the XP Embedded newsgroup, and it's been suggested to ask this > > question here, since no on on the embedded newsgroup knows the answer. > > > > We have the IIS FTP server setup to allow us (the manufacturer) full > > access > > to the C: drive using the Administrator account. > > In addition to this we would like to setup FTP for the end-user to a > > specific > > directory only. How do I do this with the IIS FTP server? Everything I've > > tried ends up giving the user account full access to the C: drive. > >
I'd be inclined to have two virtual server instances, one for each purpose,
however I'm not sure it's a great idea to have you entire C: drive exposed over FTP - which isn't a particularly secure protocol in its default state. Is there a particular reason you're doing this? -- Jason Brown Microsoft GTSC, IIS This posting is provided "AS IS" with no warranties, and confers no rights. [quoted text, click to view] "Chris Rose" <ChrisRose@discussions.microsoft.com> wrote in message news:3E0B6ED5-2FAD-4E33-81B7-AFEB27A1F70F@microsoft.com... >I come from the XP Embedded newsgroup, and it's been suggested to ask this > question here, since no on on the embedded newsgroup knows the answer. > > We have the IIS FTP server setup to allow us (the manufacturer) full > access > to the C: drive using the Administrator account. > In addition to this we would like to setup FTP for the end-user to a > specific > directory only. How do I do this with the IIS FTP server? Everything I've > tried ends up giving the user account full access to the C: drive.
On Fri, 18 Mar 2005 05:39:13 -0800, "Chris Rose"
[quoted text, click to view] <ChrisRose@discussions.microsoft.com> wrote: >Setting permissions keeps the limited user from logging in because the FTP >root shares the entire c:\ drive. I set up a virtual directory for the use >that I want to have limited access and set a path to be a subdirectory on the >c: drive such as c:\limited_user, but since NTFS permission prohibit the >limited user from access to c:\ then the user gets rejected when FTP'ing in >to the box. Not when used correctly. Limited user gets permissions on C:\ but nothing under the root except the folder they need access to. It's basic Windows permissions and security. Though why anyone would do this is beyond me. Set the user's home folder to the folder they need access to, or if this is on an XP box, see: How To Set Up an FTP Site So That Users Log Onto Their Folders: http://support.microsoft.com/default.aspx?scid=kb;EN-US;201771 Also helpful: HOW TO: Set Up an FTP Server in Windows 2000 http://support.microsoft.com/?id=300662 HOW TO: Set Up an FTP Server in Windows Server 2003 http://support.microsoft.com/default.aspx?scid=kb;en-us;323384 HOW TO: Create a Secure FTP Directory that Uses Password Authentication: http://support.microsoft.com/?id=239120 How To Limit Access to a FTP Site in Windows Server 2003: http://support.microsoft.com/default.aspx?scid=kb;en-us;816525 INFO: FTP Site Administration Documentation in IIS 6.0: http://support.microsoft.com/default.aspx?scid=kb;en-us;814865 Hosting Multiple FTP Sites with FTP User Isolation http://www.microsoft.com/resources/documentation/IIS/6/all/techref/en-us/iisRG_CFG_21.mspx Jeff [quoted text, click to view] >"Jeff Cochran" wrote:
> >> On Thu, 17 Mar 2005 07:51:06 -0800, "Chris Rose" >> <ChrisRose@discussions.microsoft.com> wrote: >> >> >I come from the XP Embedded newsgroup, and it's been suggested to ask this >> >question here, since no on on the embedded newsgroup knows the answer. >> > >> >We have the IIS FTP server setup to allow us (the manufacturer) full access >> >to the C: drive using the Administrator account. >> >In addition to this we would like to setup FTP for the end-user to a specific >> >directory only. How do I do this with the IIS FTP server? Everything I've >> >tried ends up giving the user account full access to the C: drive. >> >> NTFS permissions. >> >> Jeff >>
nope, I mean virtual server
-- Jason Brown Microsoft GTSC, IIS This posting is provided "AS IS" with no warranties, and confers no rights. [quoted text, click to view] "Chris Rose" <ChrisRose@discussions.microsoft.com> wrote in message news:D6E07757-110F-4D8C-A615-82D7CF389E21@microsoft.com... > By Virtual Server, do you mean Virtual Directory? > > "Jason Brown [MSFT]" wrote: > >> I'd be inclined to have two virtual server instances, one for each >> purpose, >> however I'm not sure it's a great idea to have you entire C: drive >> exposed >> over FTP - which isn't a particularly secure protocol in its default >> state. >> Is there a particular reason you're doing this? >> >> >> -- >> Jason Brown >> Microsoft GTSC, IIS >> >> This posting is provided "AS IS" with no warranties, and confers no >> rights. >> >> >> "Chris Rose" <ChrisRose@discussions.microsoft.com> wrote in message >> news:3E0B6ED5-2FAD-4E33-81B7-AFEB27A1F70F@microsoft.com... >> >I come from the XP Embedded newsgroup, and it's been suggested to ask >> >this >> > question here, since no on on the embedded newsgroup knows the answer. >> > >> > We have the IIS FTP server setup to allow us (the manufacturer) full >> > access >> > to the C: drive using the Administrator account. >> > In addition to this we would like to setup FTP for the end-user to a >> > specific >> > directory only. How do I do this with the IIS FTP server? Everything >> > I've >> > tried ends up giving the user account full access to the C: drive. >> >> >>
Don't see what you're looking for? Try a search.
|
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
| home · blog · groups | Questions? Comments? Contact the dn |