Groups | Blog | Home
all groups > iis ftp > july 2005 >

iis ftp : Anonymous user access problem.



Amit
7/18/2005 11:49:02 PM
Hi,

I have installed IIS6 on windows 2003 server only with FTP services and with
anonymous access enabled for FTP.when i am tring to access the server using
FTP , it gives a error 530 user can not login, login failed.

This is a stanalone server.The anonymous user is having "log on locally
rights" in local system policy.

Pls advice.
Thanks
Bernard Cheah [MVP]
7/19/2005 12:00:00 AM
What about other priviliges in this kb ?
Err Msg: 530 User <Username> Cannot Log In. Login Failed.
http://support.microsoft.com/?id=200475

--
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


[quoted text, click to view]

Bernard Cheah [MVP]
7/19/2005 12:00:00 AM
Ok. enable audit on logon event. if you create a new user and grant the same
right, can the new user login via ftp?

--
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


[quoted text, click to view]

Amit
7/19/2005 1:31:07 AM
Hi,

Everyone and IUSR_Machine name account have "Access this computer from the
network " rights also.

[quoted text, click to view]
Amit
7/19/2005 5:58:15 AM
Hello Bernard,
Thanks for your help.

Here are some of observations.

After installing IIS i found that IUSR was member of Guests group only and i
was not able to access ftp server using anonymous user.
then i add the IUSR account to USERS group and removed it from Guests group.
and now it is working fine.
But the starnge thing is as per your suggestion i created a new Test user
and made it member of guests group only and I am able to access FTP site
using this test user.

Any suggestion on this



[quoted text, click to view]
Bernard Cheah [MVP]
7/20/2005 12:00:00 AM
Yupe, strange indeed. I suspect some user rights was granted to users group.
is the new Test user a memberof USERS group ? or it is not and justs GUEST
group but able to login ?

--
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


[quoted text, click to view]

Bernard Cheah [MVP]
7/21/2005 12:00:00 AM
Mm... in that case, the default new TEST user has some user rights that not
available for the anonymous account. however I can't think of any of those
rights :)

Remove the iusr from the USER group, and put it back to guest group, restart
IIS services. try again.

--
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


[quoted text, click to view]

Amit
7/21/2005 12:11:02 AM
Hello Bernard,

Yes the new Test user is just member of Guests group only . I am able to
login to FTP server with this User.

Thaks

[quoted text, click to view]
AddThis Social Bookmark Button