Re: FTP

From: Stephen L Nicoud (nicouds@hotmail.com)
Date: 02/20/03 

From: "Stephen L Nicoud" <nicouds@hotmail.com>
Date: Wed, 19 Feb 2003 21:53:39 -0500

Note well that if your users are accessing your FTP service over an untrusted network (like the Internet without VPN/IPsec) then you are susceptible to having the users' usernames and passwords sniffed off from the network traffic as the plain vanilla File Transfer Protocol provides no privacy (encryption) on the credentials as they travel over the wire.

"Jimmy Face" <jason_gorman@hotmail.com> wrote in message news:epzdQUB2CHA.2644@TK2MSFTNGP11.phx.gbl...
> Here's the exact process I needed:
>
> If you want to prevent anonymous access to the site, clear the option Allow
> Anonymous Connections. Users must then provide a valid local account with
> the necessary rights to log onto the FTP site (explained shortly).
>
> Tip Although you could change the account that the FTP service uses
> for anonymous logon, I don't recommend it. Leave the default IUSR account in
> place and allow IIS to control the password (through the option of the same
> name).
>
>
> For remote users to connect to the FTP service, the account they provide
> must have the right to log on locally. Setup grants the IUSR account this
> right when you install IIS. You need to grant this right to any other
> accounts that are authorized to use the FTP service. You could assign the
> right on a per-user basis, but I recommend you create a local group named
> ftp-users (or something similar), grant this group the right to log on
> locally, and then add accounts to the group as needed.
>
> To create the FTP group, open the Computer Management console and expand the
> Local Users and Groups branch. Right-click the Groups node and choose New
> Group to open the New Group dialog box. Specify the group name and then
> click Add to add local accounts to the group. After populating the group,
> click Create, then close the dialog box.
>
> After you create and populate the group, you need to grant it the right to
> log on locally as I mentioned before. Open the Local Security Policy from
> the Administrative Tools folder. Expand the branch \Security Settings\Local
> Policies\User Rights Assignment, and then double-click the Log On Locally
> right to display the Log On Locally Properties dialog box. Click Add User Or
> Group, enter the name of the group you just created, and click OK. If you
> want to browse for the group, click Object Types, place a check beside
> Groups, and click OK. Click Advanced and search for the recently created FTP
> users group, then close the dialog box and the policy editor.
>
> Now it's time to test the FTP service. You don't need to log on from another
> computer. Just open a command console and type ftp localhost. Or enter ftp
> and, at the ftp> prompt, type open localhost. Enter the necessary account
> credentials when prompted. If the logon fails, verify the account
> credentials and check that the account is included in the local ftp-users
> group. Also check the methods you've allowed for authentication on the FTP
> server, then try again.
>
> JimmyFace.
>
> "BB" <Bernard_at_3exp.com> wrote in message
> news:Ov5Tqqv1CHA.2012@TK2MSFTNGP09...
> > what ? just create the user in 'computer management'
> > then assign the respective rights. and if you have
> > login issue then refer to the previous kb.
> >
> > Rgds.
> >
> >
> > "Jimmy Face" <jason_gorman@hotmail.com> wrote in message
> > news:#htuvxu1CHA.1712@TK2MSFTNGP10...
> > > How do you do that in Windows XP Professional?
> > >
> > > JimmyFace.
> > >
> > >
> > > "BB" <Bernard_at_3exp.com> wrote in message
> > > news:u8leQ6k1CHA.1424@TK2MSFTNGP12...
> > > > Yes, just create local user then grant related rights.
> > > > you get any errors ?
> > > > refer
> > > > http://support.microsoft.com/?id=200475
> > > >
> > > > Rgds.
> > > >
> > > >
> > > > "Jimmy Face" <jason_gorman@hotmail.com> wrote in message
> > > > news:eppZsmk1CHA.2264@TK2MSFTNGP11.phx.gbl...
> > > > > Hi guys,
> > > > >
> > > > > Is IIS 5.1 that comes with Windows XP Pro the full blown IIS
> product?
> > > Or
> > > > a
> > > > > scaled down version? I know you're limited to 10 connections and 1
> > web
> > > > > however I want to know if all the functionality is there because
> > frankly
> > > > it
> > > > > seems very limited.
> > > > >
> > > > > Also, is there a way to create new usernames and password for your
> IIS
> > > ftp
> > > > > site in Windows XP Pro's IIS?
> > > > >
> > > > > Thanks.
> > > > >
> > > > > JimmyFace.
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Relevant Pages

  • RE: Confused about FTP for IIS7 authorization
    ... ACL list includes your test account and that's why you can login without ... them are with allowed rules in FTP authorization. ... Microsoft Online Community Support ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: Secure FTP site
    ... Users must then provide a valid local account with ... For remote users to connect to the FTP service, ... You need to grant this right to any other ... the Administrative Tools folder. ...
    (microsoft.public.inetserver.iis.security)
  • Re: FTP
    ... Users must then provide a valid local account with ... For remote users to connect to the FTP service, ... You need to grant this right to any other ... Policies\User Rights Assignment, and then double-click the Log On Locally ...
    (microsoft.public.inetserver.iis.security)
  • Re: To tri-homed, or not to tri-homed... that is the question
    ... > It's just the site we test prior to pushing content to the live server. ... It sounded like you already have a Back-to-Back DMZ. ... In fact, if it is anything other than FTP, ... new account *locally* on the Web Server itself for them to use. ...
    (microsoft.public.windows.server.sbs)
  • Re: FTP
    ... I believe there are a number of free third party FTP server ... > Tip Although you could change the account that the FTP service uses ... > For remote users to connect to the FTP service, ... You need to grant this right to any other ...
    (microsoft.public.inetserver.iis.security)