iis ftp: User Isolation with a non-isolated admin user -- iis ftp

You're in the

iis ftp

group:

User Isolation with a non-isolated admin user

maquez
3/9/2006 12:29:12 PM

iis ftp: I'm looking for a way to have 20 or so FTP user accounts that are isolated,
but to then also have an admin/manager login that would not be isolated and
could access any of the other user account folders. Is this possible? I am
trying to do this without AD integration.

Looks like I could setup a virtual directory, but if any of the other users
guessed what the name of the virutal directory was they could cd to that
directory. I would like it so there was no chance any of the isololated
users could "escape" their folder.

Re: User Isolation with a non-isolated admin user

Chris Crowe [MVP 1997 -> 2006]
3/10/2006 12:00:00 AM

I really do not think that this is able to be done with IIS and one FTP
Site.

You could possibly have more than one FTP site (more IP addresses would be
needed)

--

Cheers

Chris Crowe [IIS MVP 1997 -> 2006]
http://blog.crowe.co.nz
------------------------------------------------

[quoted text, click to view]

Re: User Isolation with a non-isolated admin user

Bernard Cheah [MVP]
3/13/2006 11:38:42 AM

Yes, you are correct. this can only be done via 'virtual directory.
And about your concern, as long as you got the correct permission, it should
be fine.
e.g.
ftproot
d:\ftp\localuser\ (UserX - Read, Admin1 - Full)

userX (UserX - Full on their own folder, Admin1 - Full)
d:\ftp\localuser\userX

admin1
d:\ftp\localuser\admin1

virtual directory (/manage)
d:\ftp\localuser\

so even if User1 - discover the /manage folder, he/she can only see User1
folder as he/she doesn't have READ permission on other user folder.........

--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://msmvps.com/blogs/bernard/

[quoted text, click to view]

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages in the iis ftp group.

home · blog · groups

Questions? Comments? Contact the dn