Re: Isolate users using Active Directory

Errrr..... before we going to solve your AD user issue. just to check what
FTP server you using?

From the output you posted -
220 ServU FTP-Server v2.5n for WinSock ready...
530 Sorry, no ANONYMOUS access allowed"

this is ServU ftp server and it is configured not to anonymous server.......

you sure you have iis ftp setup and connecting to the correct ftp server?


Next, in step 8, during the ftp wizard creation. the user you specify must
be a AD users that have domain access to the AD objects. typically, I will
put domain administrators. but not the ftp user.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Mr. Rob" <MrRob@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:00627184-9DB4-4149-AF20-E1ACF3485404@xxxxxxxxxxxxxxxx
Hi Bernard,

You must be an IIS god because whenever I do a search for
the problems I'm having I always see the name 'Bernard'.

I still can't get this to work.

I've started over (removed IIS and re-installed it).

Here's what I've done.

1. I've created a user (frodo) with minimal privelages (domain users)
2. Granted 'frodo' log on locally privelages
3. I've created user accounts for Isolated User Access (userA, userB and
userC)
4. I've created a folder structure on my F: drive that looks like this:

F:\Clients
clientA
clientB
clientC

5. Set NTFS permissions on folders where userA has access to clientA,
userB to
clientB and userC to clientC.
6. Installed IIS/FTP
7. Created new FTP site with User Isolation (option 3)
8. Used 'frodo' as my user in setup
9. Downloaded and ran the tool for setting home directories (nice
utility)
10. Successfully ran the adsi commands:

adsutil set /msftpsvc/722635/AllowAnonymous TRUE
adsutil set /msftpsvc/722635/AnonymousOnly FALSE
adsutil set /msftpsvc/722635/AnonymousUserName MyDomain\LowPrivUser
adsutil set /msftpsvc/722635/AnonymousUserPass password

11. Stopped/Started IIS services
12. Went to my ftp url ftp://ftp.mydomain.com

RESULT

On one computer I get 'Internet Explorer cannot display the webpage'.
On another computer (the server) I get a popup that says:

"Windows cannot access this folder. Make sure you typed the file name
correctly
and that you have permission to access folder.

Details:
220 ServU FTP-Server v2.5n for WinSock ready...
530 Sorry, no ANONYMOUS access allowed"

I can't seem to get past that point. Help!

Thanks,

Rob


.

Relevant Pages

  • Re: Microsoft FTP Server problem on W2K?
    ... It is a UNISYS ClearPath mainframe system that is trying to FTP using ... passive mode to a MS FTP server. ... Currently the mainframe FTPs in ACTIVE mode. ... Since the mainframe pushes files to our customers over a WAN connection, ...
    (microsoft.public.inetserver.iis.security)
  • RE: FTP Upload
    ... FTP server to the following specified size. ... //set or get the remote path of the FTP server that you want to connect. ... //set the class MessageString. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: FTP Upload
    ... FTP server to the following specified size. ... //set or get the remote path of the FTP server that you want to connect. ... //set the class MessageString. ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: vsftpd beginners tutorial?
    ... # This file was created to illustrate the steps needed to create a new FTP ... Why vsftpd as this FTP Server? ... System software customization considerations. ... User and Group Configuration ...
    (RedHat)
  • Re: Isolate users using Active Directory
    ... I reinstalled FTP and used a ... not login to the FTP server with the user name and password specified". ... Set NTFS permissions on folders where userA has access to clientA, ... adsutil set /msftpsvc/722635/AllowAnonymous TRUE ...
    (microsoft.public.inetserver.iis.ftp)