The issue is with IE7 not Vista. Have you try Windows Explorer it will
redirect to user folder.
Anyway for IIS 5, even user got redirected to the home path, they still able
to do a 'cd ..' and navigate
to the root path.
So the trick here you can do is
a) map ftproot to a dummy path. say f:\ftpdummy
b) create vdir of the same user name and point it to the actual content
path, say e:\ftpclient\bob\
c) make sure you control NTFS permissions on ftpclient path. so that even if
bob know susan folder 'cd susan', bob will not be able to access the folder.
--
Regards,
Bernard Cheah
http://www.iis.net/ http://msmvps.com/blogs/bernard/ [quoted text, click to view] "StevieD" <StevieD@discussions.microsoft.com> wrote in message
news:BBFAF676-3D1E-40F4-B235-BA79AA93E4AA@microsoft.com...
> Our Setup: IIS 5.0 FTP site is pointing to the home directory of
> inetpub\ftproot. Within here, we have separate folders setup for each
> customer. The permissions on these folders are restricted to
> administrators
> and the local user account (customer account), which has read access. So
> when user Bob logs into the FTP site, they are directed to their folder
> called Bob.
>
> Now, we have an issue with permissions, where authenticated users using
> Vista & IE, are defaulted to the full directory listing of the ftproot
> folder. This enables any potential customer with a user\pass to view our
> customer base. Using Windows and going through Internet Explorer to
> access
> the FTP site (rather than FTP client software or UNIX for example), it
> seems
> being defaulted to the root of the directory is only possible with Vista
> (not
> XP). Once logged in using Vista, it defaults to the ftproot directory
> (where
> you can view all folders), instead of going straight to the particular
> folder
> for the customer. Why is this?
>
> I’ve tried changing the ‘Apply onto’ setting to Subfolders only &
> Subfolders
> and files only, but this then doesn’t allow the user to login, as they don’t
> have read permissions to ftproot where their folder is located. I’ve even
> tried removing some of the explicit permissions like ‘List Folder’ etc,
> but
> unless the permissions are set as shown, any user account cannot login.
>
> How else could I set this up, to allow users to login, but to prevent the
> full directory listing of ftproot being shown when using Vista? I will
> test
> to see if viewing the full directory listing is possible using an FTP
> client
> like SmartFTP or CuteFTP.
>
