Re: FTP

From: Jimmy Face (jason_gorman@hotmail.com)
Date: 02/19/03


From: "Jimmy Face" <jason_gorman@hotmail.com>
Date: Wed, 19 Feb 2003 08:47:38 -0400


Here's the exact process I needed:

If you want to prevent anonymous access to the site, clear the option Allow
Anonymous Connections. Users must then provide a valid local account with
the necessary rights to log onto the FTP site (explained shortly).

     Tip Although you could change the account that the FTP service uses
for anonymous logon, I don't recommend it. Leave the default IUSR account in
place and allow IIS to control the password (through the option of the same
name).

For remote users to connect to the FTP service, the account they provide
must have the right to log on locally. Setup grants the IUSR account this
right when you install IIS. You need to grant this right to any other
accounts that are authorized to use the FTP service. You could assign the
right on a per-user basis, but I recommend you create a local group named
ftp-users (or something similar), grant this group the right to log on
locally, and then add accounts to the group as needed.

To create the FTP group, open the Computer Management console and expand the
Local Users and Groups branch. Right-click the Groups node and choose New
Group to open the New Group dialog box. Specify the group name and then
click Add to add local accounts to the group. After populating the group,
click Create, then close the dialog box.

After you create and populate the group, you need to grant it the right to
log on locally as I mentioned before. Open the Local Security Policy from
the Administrative Tools folder. Expand the branch \Security Settings\Local
Policies\User Rights Assignment, and then double-click the Log On Locally
right to display the Log On Locally Properties dialog box. Click Add User Or
Group, enter the name of the group you just created, and click OK. If you
want to browse for the group, click Object Types, place a check beside
Groups, and click OK. Click Advanced and search for the recently created FTP
users group, then close the dialog box and the policy editor.

Now it's time to test the FTP service. You don't need to log on from another
computer. Just open a command console and type ftp localhost. Or enter ftp
and, at the ftp> prompt, type open localhost. Enter the necessary account
credentials when prompted. If the logon fails, verify the account
credentials and check that the account is included in the local ftp-users
group. Also check the methods you've allowed for authentication on the FTP
server, then try again.

JimmyFace.

"BB" <Bernard_at_3exp.com> wrote in message
news:Ov5Tqqv1CHA.2012@TK2MSFTNGP09...
> what ? just create the user in 'computer management'
> then assign the respective rights. and if you have
> login issue then refer to the previous kb.
>
> Rgds.
>
>
> "Jimmy Face" <jason_gorman@hotmail.com> wrote in message
> news:#htuvxu1CHA.1712@TK2MSFTNGP10...
> > How do you do that in Windows XP Professional?
> >
> > JimmyFace.
> >
> >
> > "BB" <Bernard_at_3exp.com> wrote in message
> > news:u8leQ6k1CHA.1424@TK2MSFTNGP12...
> > > Yes, just create local user then grant related rights.
> > > you get any errors ?
> > > refer
> > > http://support.microsoft.com/?id=200475
> > >
> > > Rgds.
> > >
> > >
> > > "Jimmy Face" <jason_gorman@hotmail.com> wrote in message
> > > news:eppZsmk1CHA.2264@TK2MSFTNGP11.phx.gbl...
> > > > Hi guys,
> > > >
> > > > Is IIS 5.1 that comes with Windows XP Pro the full blown IIS
product?
> > Or
> > > a
> > > > scaled down version? I know you're limited to 10 connections and 1
> web
> > > > however I want to know if all the functionality is there because
> frankly
> > > it
> > > > seems very limited.
> > > >
> > > > Also, is there a way to create new usernames and password for your
IIS
> > ftp
> > > > site in Windows XP Pro's IIS?
> > > >
> > > > Thanks.
> > > >
> > > > JimmyFace.
> > > >
> > > >
> > >
> > >
> >
> >
>
>



Relevant Pages

  • Re: Secure FTP site
    ... I created a group that has log on locally rights, ... cmd line ftp I can access this ftp site fine. ... > Tip Although you could change the account that the ... >the Administrative Tools folder. ...
    (microsoft.public.inetserver.iis.security)
  • RE: Confused about FTP for IIS7 authorization
    ... ACL list includes your test account and that's why you can login without ... them are with allowed rules in FTP authorization. ... Microsoft Online Community Support ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: Secure FTP site
    ... Users must then provide a valid local account with ... For remote users to connect to the FTP service, ... You need to grant this right to any other ... the Administrative Tools folder. ...
    (microsoft.public.inetserver.iis.security)
  • Re: FTP
    ... > the necessary rights to log onto the FTP site. ... > Tip Although you could change the account that the FTP service uses ... > For remote users to connect to the FTP service, ... You need to grant this right to any other ...
    (microsoft.public.inetserver.iis.security)
  • Re: To tri-homed, or not to tri-homed... that is the question
    ... > It's just the site we test prior to pushing content to the live server. ... It sounded like you already have a Back-to-Back DMZ. ... In fact, if it is anything other than FTP, ... new account *locally* on the Web Server itself for them to use. ...
    (microsoft.public.windows.server.sbs)