"mathew dalton" <mathewdalton@discussions.microsoft.com> wrote in message
news:0C09CD7E-ADB8-493F-86A7-E95AB8229CE2@microsoft.com...
> Running IIS 6 Win 2003 server, Primary DC.
> I setup FTP server, used NTFS permissions on the folder to 2 users, admin
> and bob.
>
> I want no one else but Bob and admin to be able to access this FTP Server,
> it is out facing. In IIS right click the FTP server I created, go to
> permissions, change inheritance, removed everyone but Admin and Bob. Not
> the
> admin group, just user the user account Admin and Bob, no groups…. On the
> server I have removed anonymous access, so it does prompt for a username
> and
> password.
>
> NAT’d the firewall to my server, connect from the outside prompted for
> user
> name and password and any domain user can access this FTP server. The
> point
> is we have Machines, C and C machines and they are a total pain to get
> working on a network, so they have usernames of 123 and password of 123…
> Guess what you can access the FTP server with 123 and 123!!!! Not good!!!
> What am I missing!!!
>