Hi Bruce
Based on my understanding, you want to assign each individual account to an
existing folder based from one common root.
If the IIS server has joined into domain, you can enable the new FTP Active
Directory User Isolation feature of IIS6 to dispatch users into their own
FTP home directories.
Please refer to the detailed steps below.
To create FTP sites with Isolate users using Active Directory mode
1. In IIS Manager, click the local computer, right-click the
FTP Sites folder, point to New, and click FTP Site.
2. In the Welcome to the FTP Site Creation Wizard, click Next.
3. In FTP Site Description, type a description for the FTP
site, and then click Next.
4. In IP Address and Port Settings, type an IP address and
port, and then click Next.
5. In FTP User Isolation, click Isolate users using Active
Directory, and then click Next.
6. In the User name text box, type the user name, using the
Domain\User format. Choose a user with minimal domain privileges. This user
name is used to access Active Directory and read the home directory
properties.
7. In the Password text box, type the password of the user.
8. In the Enter the default Active Directory domain text box,
type the default domain name.
This domain name is used for the users who do not specify their user domain
when they log on. In other words, a user connecting with the user name
Domain1\User1 is authenticated against Domain1, while a user connecting as
User2 is authenticated against the default logon domain. If a default
domain is not named and a user does not specify a domain name, access is
denied for all but anonymous users. Type the base domain name only, not the
fully qualified name. For example, type MyDomain, not
MyDomain.dept.microsoft.com.
9. Click Next. You are prompted to re-enter the password for
the user entered in the previous steps.
10. Follow the directions to complete the wizard.
By default, anonymous access is disabled to sites created in this isolation
mode.
To prepare to convert an existing FTP site to Isolate users using Active
Directory mode
1. Plan user distribution over your network file server
resources.
2. Create server shares and user directories for all users that
have access to FTP.
3. Make sure to create a directory for anonymous access (if you
want to enable anonymous user connections).
4. For each user, set the msIIS-FTPRoot and msIIS-FTPDir
properties in Active Directory to point to the new home directory using
Iisftp.vbs, by typing the following at the command line:
Iisftp.vbs /SetADProp UserName FTPRoot Server\Share
Iisftp.vbs /SetADProp UserName FTPDir Directory
For complete Iisftp.vbs syntax, see "Setting Active Directory User
Isolation" in IIS 6.0 Help, or type Iisftp.vbs /SetADProp /? at the command
prompt.
To enable anonymous access for the FTP site configured with Isolate users
using Active Directory mode
1. Configure the metabase properties as shown in the following
example. You can do so by using the adsutil.vbs SET command-line tool.
adsutil set /msftpsvc/6634/AllowAnonymous "TRUE"
adsutil set /msftpsvc/6634/AnonymousOnly "FALSE"
adsutil set /msftpsvc/6634/AnonymousUserName
"MyDomain\LowPrivUser"
adsutil set /msftpsvc/6634/AnonymousUserPass "PaSsWoRd"
The link of IIS6 resource kit is
http://www.microsoft.com/downloads/details.aspx?familyid=80a1b6e6-829e-49b7- 8c02-333d9c148e69&displaylang=en+
And the corresponding chapters is
Part II: Ch 8: Configuring Internet Sites and Services
Please let me know if you have any further questions. Thanks.
Best Regards,
WenYuan Wang
Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to:
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif ications.
Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at:
http://msdn.microsoft.com/subscriptions/support/default.aspx. ==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.