RE: FTP Accounts

From: Andrew Davis [MS] (adavis_at_online.microsoft.com)
Date: 01/21/04

  • Next message: Andrew Davis [MS]: "RE: IIS Directory Security Resets after restarting Services or Reboot"
    Date: Wed, 21 Jan 2004 16:24:11 GMT
    
    

    Create the new account, give them NTFS access to the ftproot folder and any
    other area you want them to have access to, and make sure Allow ONLY
    anonymous isn't checked. Also if you create a folder named the same as
    thier user account then they will be auto-redirected to that folder, called
    home directory, when they first logon to the FTP server. Here's a link on
    hiding FTP directories using the concept of home directories;

     245048 How to: Hide FTP Directories
    http://support.microsoft.com/?id=245048

    This will prompt the user for user/pass and these credentials are passed in
    clear text across the wire. This is not recommended and can be dangerous.
    Using WebDAV with SSL is recommended from secure file transfer. See KB
    323470;

    323470 HOW TO: Create a Secure WebDAV Publishing Directory
    http://support.microsoft.com/?id=323470

    This posting is provided "AS IS" with no warranties, and confers no rights.

    Thanks!
    ~Andrew Davis
    Microsoft PSS Security

    --------------------
    | Content-Class: urn:content-classes:message
    | From: "Jim Wilson" <anonymous@discussions.microsoft.com>
    | Sender: "Jim Wilson" <anonymous@discussions.microsoft.com>
    | Subject: FTP Accounts
    | Date: Tue, 20 Jan 2004 11:28:38 -0800
    | Lines: 3
    | Message-ID: <0d7001c3df8b$9ac7cf20$a101280a@phx.gbl>
    | MIME-Version: 1.0
    | Content-Type: text/plain;
    | charset="iso-8859-1"
    | Content-Transfer-Encoding: 7bit
    | X-Newsreader: Microsoft CDO for Windows 2000
    | Thread-Index: AcPfi5rHPA59LsOfQBu395y5g6X9gQ==
    | X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
    | Newsgroups: microsoft.public.inetserver.iis.security
    | Path: cpmsftngxa07.phx.gbl
    | Xref: cpmsftngxa07.phx.gbl microsoft.public.inetserver.iis.security:8809
    | NNTP-Posting-Host: tk2msftngxa09.phx.gbl 10.40.1.161
    | X-Tomcat-NG: microsoft.public.inetserver.iis.security
    |
    | I'm new to setting up an FTP server. Can someone tell me
    | what I need to do to give write access to someone out
    | side of my domain?
    |


  • Next message: Andrew Davis [MS]: "RE: IIS Directory Security Resets after restarting Services or Reboot"

    Relevant Pages

    • Separate Anonymous Access User to prevent FTP browsing?
      ... I have several virtual webs running in the same FTP root folder. ... With this setup, a user can authenticate with their FTP account, browse from ... - Point the WWW virtual web at that same folder. ...
      (microsoft.public.inetserver.iis)
    • Re: Windows 2003 Error need help
      ... A 3rd party FTP may be more secure. ... First you would want to rename your AD administrator account to something else, then create an administrator account in the domain, but only leave it in the Guest group, then disable the account. ... Thn create a user account on ServU called "administrator" on ServU, leave the password blank, create ab empty folder, then configure the administrator user account you created to use this emtpy folder as its home folder, then configure permissions to only Read. ...
      (microsoft.public.windows.server.networking)
    • Re: Secure FTP site
      ... Users must then provide a valid local account with ... For remote users to connect to the FTP service, ... You need to grant this right to any other ... the Administrative Tools folder. ...
      (microsoft.public.inetserver.iis.security)
    • Re: My FTP access is very unsecure - advice requested
      ... Do you have security set at the folder level for each user's folder? ... >> search random IP addresses for FTP servers that are open to abuse. ... >> because that account exists to allow anonymous logons to proceed. ... >> There are secure FTP servers available for even less than that - I'm ...
      (microsoft.public.inetserver.iis.ftp)
    • Re: Help with configuration
      ... to redirect their My Documents folder to a share on the fileserver. ... GPo, if it is already redirecting by default? ... account profile is blank, also). ... Your GPO settings do not apply to your Terminal Server. ...
      (microsoft.public.windows.terminal_services)