all groups > iis ftp > november 2006 >
You're in the

iis ftp

group:

Stop moving up a level using ..


Stop moving up a level using .. Fabrussio
11/6/2006 12:00:02 PM
iis ftp:
I have a default FTP site which allows win2003 active directory users to
access their documents externally. The FTP site home directory is
\\server\users\ (where 'server' is not the same server as the FTP server) and
after prompting for their username and password it directs them to the
correct place. ie. \\server\users\username\

Question is can I stop them entering .. and going up a level to the users
Re: Stop moving up a level using .. Bernard Cheah [MVP]
11/8/2006 12:00:00 AM
Try the user isolation featue with IIS 6.0
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/b63de8ef-e3c5-456d-a8ca-7af4198819d4.mspx?mfr=true

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


[quoted text, click to view]

Re: Stop moving up a level using .. Fabrussio
11/8/2006 5:35:02 AM
OK I have
- setup the AD isolated FTP site
- set for a test user FTPRoot as \\server\users
- set for a test user FTPDir as 'username'

but the user when logged into the site can still go up a level and see all
the user folders no access just the folder names, but I thought the user is
ISOLATED to his directory??

Have I missed something here??


[quoted text, click to view]
Re: Stop moving up a level using .. Bernard Cheah [MVP]
11/9/2006 12:00:00 AM
Mm... by doing 'cd ..' ?
I forget the test I did when it first came out. but user is 'locked' down in
their folder.
Are you using you on isolation mode?

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


[quoted text, click to view]

Re: Stop moving up a level using .. Fabrussio
11/9/2006 12:12:01 AM
OK, sorry about threads.
I log in from any folder in windows explorer as a test user (with the FTPDir
and FTPRoot values set as below) where it takes me direct to his space
\\server\users\test, but if I type in ../ after the address in the folder
window, it moves up to the root \\server\users directory. The FTP site is
definitely 'isolated mode'

any ideas?


[quoted text, click to view]
Re: Stop moving up a level using .. Bernard Cheah [MVP]
11/15/2006 12:00:00 AM
Query this, go to \inetpub\adminscripts, and enter
cscript adsutil.vbs get MSFTPSVC/XX/UserIsolationMode

where XX is the ftp site id.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


[quoted text, click to view]

AddThis Social Bookmark Button