Groups | Blog | Home
all groups > iis security > september 2003 >

iis security : FTP folder and permission setup questions.



Sara
9/11/2003 11:10:18 PM
I have a FTP server at my Nt4.0 SBE, and IIS 4.0 on it.
I now want to setup different folder for different
company to download or upload the files to those unique
folder, but I dont' want those company to see each other
folder on my FTP site. Is that anyway can setup a
structure on my FTP server?? I also want different
company to use a specific user name and password to get
into their own folder. Any advice would be help.
Sara
9/12/2003 10:28:27 AM
Hi,

I follow all of the instruction from those pages, but I
USE IE to the FTP site,
I still can see the other folders there. Besides, I cant'
login to a specific folder by specific users.
For example: I have User called "A" and have a right to
logon locally, and full permission to access
folder A. I can still folder B and C. when I go IE and
type ftp://myservername
then when I get into the folder A by a user A then it
said I dont' have permisson.
but when I add the Everyone with Change permission to the
folder "A" then I can do eveything.
I follow the instruction and setup a folder A to have a
permission below:

Give the FTP site's root folder the following security
access types:
.. Administrators: Full Control
.. Everyone: Read
.. System: Read
3. Create a subfolder(folder A) for user A. (These
subfolders will inherit the root folder's security
settings). Make the following security changes:
.. Remove the Everyone group.
.. Change the System account's folder's access to
Full Control (instead of Read).
.. Add the user who will use that folder, and give
that user Full Control access. (userA)


Why I still need to put that everyone group back there in
order to make that work??
second, why I still can see other folder even I setup
those up virtual directory to Folder A, B and C???
Please help. Thank you. ...

Bernard
9/12/2003 2:53:01 PM
Yes, you can combine virtual directory with
NTFS permission settings, try

HOW TO: Create a Secure FTP Directory that Uses Password Authentication
http://support.microsoft.com/?id=239120
How To Set Up an FTP Site So That Users Log Onto Their Folders
http://support.microsoft.com/?id=201771
How to: Hide FTP Directories
http://support.microsoft.com/?id=245048

Utilize virtual directory as it is hidden and not
listed when you do a dir listing.

--
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...


[quoted text, click to view]

Bernard
9/15/2003 5:17:41 PM
1) As I remembered in my past setup, no need
to put 'everyone' in the access list for the user folder
in order to make this to work.

2) Follow the kb 201771, try the physical folder
setup first, make sure it work, then try to move the
ftp root to else where, create a virtual link and
map to that folder.

virtual folder is hidden, if need users folder to be
visible, create those users directory under the ftp
root.

--
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...


[quoted text, click to view]

AddThis Social Bookmark Button