Re: Additional Restrictions - option

From: BB (Bernard_at_3exp.com)
Date: 04/01/03 

From: "BB" <Bernard_at_3exp.com>
Date: Tue, 1 Apr 2003 10:06:17 +0800

IIS FTP only support anonymous and basic. No windows integrated.
The things I'm wondering is when you set the additional anonymous
settings, some user works while some are not. if it works, meaning
the 'some other users' have some permission and rights issue.

You should try the filemon utility, it will shows you related
access issues. 

-- 
Regards,
Bernard Cheah
http://support.microsoft.com/
"bimosekin" <bimosekin@hotmail.com> wrote in message
news:03ef01c2f792$f0ae8410$a601280a@phx.gbl...
> BB,
>
> Thanks.  The "users" group already have the permission
> mentioned in the KB: "Log on Locally" and Access this
> computer from the netwrok", and all the user_accounts are
> in this group.  The FTP is configured for both Anonymous
> and Windows integrated.
>
> I have anyway decided to do away with the "Additional
> Restrictions for Anonymous Connections" option.  The most
> funny thing now is that the problem still persist, which
> was not the case before.
>
> I no longer Know what exactly is going on.
>
> bimoseekin
>
>
> >-----Original Message-----
> >Try
> >http://support.microsoft.com/?id=200475
> >
> >if no luck, get filemon from sysinternals.com,
> >run it, then try to access, look for 'access denied'
> >entry, then granted related rights.
> >
> >
> >-- 
> >Regards,
> >Bernard Cheah
> >http://support.microsoft.com/
> >
> >
> >"bimosekin" <bimosekin@hotmail.com> wrote in message
> >news:029001c2f750$169b0e20$a101280a@phx.gbl...
> >> Bernard,
> >>
> >> Yes, the error msgs is 530 "User cannot log in, home
> >> directory inaccessible. Login failed"
> >>
> >> This could not be the case since the user is in a group
> >> that has the same access and permissions, and there is
> no
> >> where anyone is denied access.
> >>
> >> What steps should I take to rectify this?
> >>
> >> Thanks,
> >> bimosekin
> >>
> >> >-----Original Message-----
> >> >What will be the error msgs ? 530 ?
> >> >have you try using ftp.exe and login as
> >> >that user at that workstation ?
> >> >
> >> >
> >> >-- 
> >> >Regards,
> >> >Bernard Cheah
> >> >http://support.microsoft.com/
> >> >
> >> >
> >> >"bimosekin" <bimosekin@hotmail.com> wrote in message
> >> >news:046d01c2f553$0284bf20$2f01280a@phx.gbl...
> >> >> In trying to harden security on our W2K/IIS5.1, I
> >> enable
> >> >> the enabled the "Additional Restrictions for
> Anonymous
> >> >> Connections" by setting the option to "2 - No access
> >> >> without explicit anonymous permission, on the "local
> >> >> security" configuration.
> >> >>
> >> >> This is working fine, however, I have some users'
> >> account
> >> >> on the system who connect through FTP.  The funny
> >> thing is
> >> >> that some succeeds while some fails, even when they
> >> are in
> >> >> the same group.  These users' have appropriate NTFS
> >> >> permission on their respective FTP folder. They can
> >> >> connect again once I reset this option to "0".  I
> have
> >> >> make sure that "everyone" do not have denied
> permission
> >> >> anywhere, and there is no where the failing users'
> have
> >> >> restriction permission on their respective folder.
> >> >>
> >> >> Where should I check again?
> >> >
> >> >
> >> >.
> >> >
> >
> >
> >.
> >

Relevant Pages

  • Re: Additional Restrictions - option
    ... you should run filemon on the ftp server. ... >>the 'some other users' have some permission and rights> issue. ... >>> bimoseekin ...
    (microsoft.public.inetserver.iis.security)
  • RE: FTP Permissions
    ... Since you've mentioned, you've given full permission to "Everyone", I assume ... in the FTP adapter configuration page ... The Everyone group represents everyone known to the Web server (FTP Server ... If I attempt to place a file into another FTP folder in a SendPort, ...
    (microsoft.public.biztalk.general)
  • Re: Virtual Directory security issues.
    ... so now is webdav and not ftp. ... Track "Permission Denied" Errors on DLL Files ... >>> there is a tab called web sharing. ... >>> tab which gives you the folder security options. ...
    (microsoft.public.inetserver.iis.security)
  • Re: FTP User Isolation Mode Questions
    ... account doesn't have WRITE NTFS permission. ... is it possible to get the FTP service to follow shortcuts used as home ... directories or placed on the root of a physical home directory? ... > I would like to set up anonymous access on my FTP site, however, I do not> wish anonymous users to have upload permission. ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: What the...??? FTP access wierdness
    ... try ftp and upload again. ... >> Bernard Cheah ... > 'write' permission set in the ftp site properties. ...
    (microsoft.public.inetserver.iis.ftp)