Re: Limited account has access to everything with FTP

Logoff your PC in the Administrator account and logon in the 'new' account
which you created for the FTP. Since an account for FTP has to have Local
Logon Privileges, you should be able to test it this way...

Once you've done that, logoff with that account and logon with your 'normal'
account.

Now go to another PC not on your network (or call/email a trusted friend)
and ask them to logon using the FTP account from their PC.

You get to know your 'trusted' friends well doing this sort of thing and a
lot of email often go back and forward before you get it right - at least in
my case it does!!!
--
Cari
(MS-MVP Printing & Imaging)

"Dave Neve" <NoAddressForSpammers@xxxxxxx> wrote in message
news:uG77zXIZFHA.2884@xxxxxxxxxxxxxxxxxxxxxxx
> Hi
>
> I hadn't done this but I was definately logged on with a special name (x)
> that had nothing to do with my administrators account.
>
> There is one folder (y) to which (x) has authorisation.
>
> (y) is the default opening folder and everything goes ok but when I click
> on 'files' in IE, explorer shows all my drives etc on the left of IE.
>
> Needless to say, I can then access them.
>
> I've now disabled 'anonymous' access and the problem still remains.
>
> Is this cos I am running the test on my own computer?
>
> I am logged on as administrator but accessing FTP with account name 'x'?
>
> Thanks in advance
>
> Dave Neve
>
>
> "Cari (MS-MVP)" <Newsgroups1@xxxxxxxxxxxxxx> a écrit dans le message de
> news: u58bZwHZFHA.3220@xxxxxxxxxxxxxxxxxxxxxxx
>> Did you disable Anonymous User Access?
>> --
>> Cari
>> (MS-MVP Printing & Imaging)
>>
>> "Dave Neve" <NoAddressForSpammers@xxxxxxx> wrote in message
>> news:utNgjgBZFHA.3364@xxxxxxxxxxxxxxxxxxxxxxx
>>> Hi
>>>
>>> I'm still trying to set up my FTP server.
>>>
>>> I was accessing it using my administrators account and I noticed that I
>>> could go open up any file on my computer which I felt was risky.
>>>
>>> So I created a new limited account and 'attributed' it to the root
>>> default folder (the one that is first opened up when I use FTP)
>>>
>>> But with 'explorer', this limited account has as much access as the
>>> administrators account before.
>>>
>>> How can I limit the account to one folder and its subfolders only?
>>>
>>> Thanks in advance
>>>
>>> Dave Neve
>>>
>>>
>>>
>>
>>
>>
>
>
>



.

Relevant Pages

  • RE: Confused about FTP for IIS7 authorization
    ... ACL list includes your test account and that's why you can login without ... them are with allowed rules in FTP authorization. ... Microsoft Online Community Support ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: Secure FTP site
    ... Users must then provide a valid local account with ... For remote users to connect to the FTP service, ... You need to grant this right to any other ... the Administrative Tools folder. ...
    (microsoft.public.inetserver.iis.security)
  • Re: FTP
    ... Users must then provide a valid local account with ... For remote users to connect to the FTP service, ... You need to grant this right to any other ... Policies\User Rights Assignment, and then double-click the Log On Locally ...
    (microsoft.public.inetserver.iis.security)
  • Re: FTP
    ... > the necessary rights to log onto the FTP site. ... > Tip Although you could change the account that the FTP service uses ... > For remote users to connect to the FTP service, ... You need to grant this right to any other ...
    (microsoft.public.inetserver.iis.security)
  • Re: To tri-homed, or not to tri-homed... that is the question
    ... > It's just the site we test prior to pushing content to the live server. ... It sounded like you already have a Back-to-Back DMZ. ... In fact, if it is anything other than FTP, ... new account *locally* on the Web Server itself for them to use. ...
    (microsoft.public.windows.server.sbs)