Re: Security.



How are you denying other users?

Remember: NTFS Permissions the most restrictive applies.

If you deny DOMAIN\USERS (then you have denied yourself since you are a
member of that group) and you deny yourself even if you grant yourself full
control.

The easiest way to do what you want is to remove all accounts from the
permissions list.

Then add your acount back in and grant it Change rights.

Then add the SYSTEM account and grant it full control (Not required to work
but works better because SYSTEM needs control)

Another better way is this:

Create a new group called FTP Read/Write and and yourself as a user
Then grant the permissions to the group

Hope this helps.

--
Cheers

Chris

Chris Crowe [IIS MVP]
http://blog.crowe.co.nz


"Jarryd" <Jarryd@xxxxxxxxxxxxxxxxxx> wrote in message
news:uPXa1gsvFHA.3588@xxxxxxxxxxxxxxxxxxxxxxx
> Hi,
>
> I am having trouble configuring access to an FTP. I have Windows Server
> 2003 and have installed FTP. In IIS I have checked both Read and Write
> access for the site. I have disabled Annonymous access. I want to secure
> it using NTFS permissions. So on the permissions tab I have made sure
> that I have Full Control. I then browse to the site and logon as myself.
> It then tells me that I don't have permission to PUT anything on the site.
> What do I have to do to enable myself Read and Write access to the site
> and deny everyone else?
>
> TIA,
>
> Jarryd
>


.



Relevant Pages

  • RE: HowTo manage IIS via MMC SnapIn without admin-rights...
    ... called Metabase Explorer. ... modifies permissions on certain metabase keys. ... The following steps will grant a specific user permissions to administer ... -- Grant the specific user FULL CONTROL ...
    (microsoft.public.inetserver.iis.security)
  • Re: NTFS woes
    ... starting with a grant of Full and subtracting part of it ... gives it and it gets taken away by deny) but this Posix compliance ... On the parent folder I already had unchecked Take Ownership, ... Permissions and Delete. ...
    (microsoft.public.windows.server.security)
  • Re: folder permissions
    ... groups and something about deny over rides allow. ... groups assigned to this one folder and the same user has diff priv's ... permissions, everyone has full control. ...
    (microsoft.public.windows.server.general)
  • Re: NTFS woes
    ... An explicit deny overrules and explicit or inherited grant. ... no permissions on those things to delete them. ...
    (microsoft.public.windows.server.security)
  • Re: [SLE] Alert
    ... Greg Wallace wrote: ... >>someone to write the file without losing all control over access to it. ... >>an object's permissions as an independently grantable privilege. ... >>also make the ability to grant a capability as an explicitly controlled ...
    (SuSE)