Re: FTP problem with more than 2 users configured

If you got 530, can't login. then it might be due to logon policy or account
disabled, locked up, etc.
For home directory inaccessible, mostly is due to permissions...

if you 'clone' that user to another account, you able to login?
how about recreate the account ?

have you try filemon (sysinternals.com) ?

--
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


"Ynte Broekhuizen" <ynte@xxxxxxxx> wrote in message
news:118ff8lhrl3770b@xxxxxxxxxxxxxxxxxxxxx
> I'm having the exact same problem as the original poster. I'm using IIS
> 6 on Windows Server 2003.
>
> One user can log on. All the others get "530 User test1 cannot log in,
> home directory inaccessible."
>
> All permissions and AD attributes FTProot and FTPdir are set correctly
> as far as I can see. A second server in regular (non-AD) user isolation
> mode, mapped to the same physical root dir works without any problem;
> all users can log on to their respective homedirs.
>
> And there's another funny thing... in the past user isolation using
> Active Directory HAS worked perfectly for all users. The problem began
> after the installation of Exchange Server 2003.
>
> Exchange Server modifies the group policy to restrict local log on and
> network access rights. I suspect this is somehow the cause, altough it
> doesn't explain why one user can still log on. This user is not in
> Administrators, nor any other extended rights group.
>
> Also, I have manually enabled 'local log on' and 'access this computer
> from the network' for other users with the Group Policy Editor. This
> didn't change anything. These users still get the mentioned 530 error.
>
> Did anybody find the solution to this very strange problem?
>
> I'm ready to give up and settle for regular user isolation...
>
> --
> Ynte Broekhuizen
>
> On Bernard wrote:
>> Thanks for the update - if you have the outcome, pls let me know.
>>
>> Cheers.
>>
>>
>> "Richard L Rosenheim" <richard@xxxxxxx> wrote in message
>> news:ewsopawNFHA.2580@xxxxxxxxxxxxxxxxxxxxxxx
>>> Oh, it definitely doesn't make sense.
>>>
>>> I have tried creating several different users, all with the same
>>> results. I'm also in contact with Microsoft attempting to resolve
>>> this issue. I was
>>> posting in this newsgroup in case someone else had encountered the
>>> same problem.
>>>
>>> Thanks for taking the time to reply,
>>>
>>> Richard Rosenheim
>>>
>>>
>>>
>>> "Bernard" <qbernard@xxxxxxxxxxxxxxxxxxx> wrote in message
>>> news:%23AadjrmNFHA.3560@xxxxxxxxxxxxxxxxxxxxxxx
>>>> Well, it just doesn't make sense right ? so for now, I will try to
>>>> create a new user and see if the same thing happen. And bottom line
>>>> is I think it's
>>>> related NTFS permissions and filemon should show you more detail as
>>>> of why....
>>>>
>>>> --
>>>> Regards,
>>>> Bernard Cheah
>>>> http://www.tryiis.com/
>>>> http://support.microsoft.com/
>>>> http://www.msmvps.com/bernard/
>>>>
>>>>
>>>> "Richard L Rosenheim" <richard@xxxxxxx> wrote in message
>>>> news:%23Cd41ZcNFHA.2252@xxxxxxxxxxxxxxxxxxxxxxx
>>>>> I ran filemon on the ftp server (SBS 2003). The home folder is on
>>>>> the local
>>>>> machine. There's is nothing special about the user. That's what
>>>>> has made this problem so baffling. The user was created the same
>>>>> was as the first two users.
>>>>>
>>>>> Richard Rosenheim
>>>>>
>>>>>
>>>>> "Bernard" <qbernard@xxxxxxxxxxxxxxxxxxx> wrote in message
>>>>> news:eMO5KpZNFHA.2252@xxxxxxxxxxxxxxxxxxxxxxx
>>>>>> are you running filemon on the ftp server ?
>>>>>> what so special about this user ? is the home folder on local
>>>>>> machine or remote ?
>>>>>>
>>>>>> --
>>>>>> Regards,
>>>>>> Bernard Cheah
>>>>>> http://www.tryiis.com/
>>>>>> http://support.microsoft.com/
>>>>>> http://www.msmvps.com/bernard/
>>>>>>
>>>>>>
>>>>>> "Richard L Rosenheim" <richard@xxxxxxx> wrote in message
>>>>>> news:e7THk7YNFHA.3668@xxxxxxxxxxxxxxxxxxxxxxx
>>>>>>> We tried that. It didn't show anything helpful.
>>>>>>>
>>>>>>> Richard Rosenheim
>>>>>>>
>>>>>>> "Bernard" <qbernard@xxxxxxxxxxxxxxxxxxx> wrote in message
>>>>>>> news:%23bbECn0MFHA.580@xxxxxxxxxxxxxxxxxxxxxxx
>>>>>>>> I would try filemon (sysinternals.com) and trace 'where' IIS
>>>>>>>> ftp is sending the user. It will also show if there's
>>>>>>>> permission related error msgs.
>>>>>>>>
>>>>>>>> --
>>>>>>>> Regards,
>>>>>>>> Bernard Cheah
>>>>>>>> http://www.tryiis.com/
>>>>>>>> http://support.microsoft.com/
>>>>>>>> http://www.msmvps.com/bernard/
>>>>>>>>
>>>>>>>>
>>>>>>>> "Richard L Rosenheim" <richard@xxxxxxx> wrote in message
>>>>>>>> news:%23d3hVnpMFHA.4028@xxxxxxxxxxxxxxxxxxxxxxx
>>>>>>>>> I'm trying to configure the FTP portion of a SBS 2003 install.
>>>>>>>>>
>>>>>>>>> I'm using AD User Isolation. The first two users that I
>>>>>>>>> create and configure (using the IISFTP /SetADProp script)
>>>>>>>>> works fine. But, I
>>>>>>>>> can't
>>>>>>>>> get
>>>>>>>>> more than two users to work. Any additional users that I
>>>>>>>>> create, I get a
>>>>>>>>> "503 ... home directory inaccessible" error message when they
>>>>>>>>> attempt
>>>>>>>>> to
>>>>>>>>> establish a FTP connection. The first two users still works
>>>>>>>>> fine.
>>>>>>>>>
>>>>>>>>> I have even done a complete reinstall in case something got
>>>>>>>>> screwed up the
>>>>>>>>> first time. I still getting the same issues.
>>>>>>>>>
>>>>>>>>> All that I have installed is SBS 2003 itself, the FTP add-on
>>>>>>>>> to IIS, and
>>>>>>>>> the
>>>>>>>>> patches/updates from WindowsUpdate. No third-party software
>>>>>>>>> has been
>>>>>>>>> installed.
>>>>>>>>>
>>>>>>>>> Has anyone else experienced this problem? Anyone know of any
>>>>>>>>> solutions,
>>>>>>>>> workarounds?
>>>>>>>>>
>>>>>>>>> TIA,
>>>>>>>>>
>>>>>>>>> Richard Rosenheim
>


.

Relevant Pages

  • Re: Administrator Profile corruption
    ... It's an interesting thought, although I presume that any user account, ... the Default Domain Policy and Default DC Policy assuming the User ... However maybe this is a clue: When I RDP into server login, ... I'm on administrator.clc.006 it just creates a new profile everytime ...
    (microsoft.public.windows.server.sbs)
  • Re: Account lockout by outlook credential prompt?
    ... outlook still remembers the last login name. ... User B tries to login to his outlook profile, ... I had disabled all account lockout policy on the local security policy. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: passwords resetting upon reboot of DC
    ... In the default domain policy or a policy on domain level check the password policy settings and combine the needs with the password from the administrator, maybe they are different and accepted via AD reset but not during login, because to short or if you use password complexity settings it differs from the needs. ... I then login with a different account that has domain admin ...
    (microsoft.public.windows.server.active_directory)
  • Re: Assoicate with External account Question
    ... With Associated External Account, users authenticate with the Domain A account and the Domain B account can and should be disabled. ... Our exchange server is in a different WIN2003 forest/domain)B) ... Now my users were challanged (login authentication) to login to B ... when they launched Outlook. ...
    (microsoft.public.exchange.admin)
  • Re: Concurrent Logins
    ... policy. ... to limit accounts to a single concurrent login. ... account shares are each defined to allow one connection. ... login script checks if the mapping was successful, ...
    (microsoft.public.windows.group_policy)