Re: Isolate users using Active Directory

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Make sure you are connecting to the IIS FTP server, this round, try ftp.exe
from command line to connect.
the post the output here... also post the IIS ftp log file here as well.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Mr. Rob" <MrRob@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9B295D3C-C236-4C3F-A326-3778A5A36A6D@xxxxxxxxxxxxxxxx
I think the ServU issue is related to the laptop I'm using. I don't get
that
error on any other workstation. I reinstalled FTP (Windows FTP) and used a
domain admin account. However, whenever I try to go to my website it just
sits there for a bit and then returns the 'Log on as' window stating
"Could
not login to the FTP server with the user name and password specified".
I've
tried the user account DOMAIN\user and just user.



"Bernard Cheah [MVP]" wrote:

Errrr..... before we going to solve your AD user issue. just to check
what
FTP server you using?

From the output you posted -
220 ServU FTP-Server v2.5n for WinSock ready...
530 Sorry, no ANONYMOUS access allowed"

this is ServU ftp server and it is configured not to anonymous
server.......

you sure you have iis ftp setup and connecting to the correct ftp server?


Next, in step 8, during the ftp wizard creation. the user you specify
must
be a AD users that have domain access to the AD objects. typically, I
will
put domain administrators. but not the ftp user.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Mr. Rob" <MrRob@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:00627184-9DB4-4149-AF20-E1ACF3485404@xxxxxxxxxxxxxxxx
Hi Bernard,

You must be an IIS god because whenever I do a search for
the problems I'm having I always see the name 'Bernard'.

I still can't get this to work.

I've started over (removed IIS and re-installed it).

Here's what I've done.

1. I've created a user (frodo) with minimal privelages (domain users)
2. Granted 'frodo' log on locally privelages
3. I've created user accounts for Isolated User Access (userA, userB
and
userC)
4. I've created a folder structure on my F: drive that looks like
this:

F:\Clients
clientA
clientB
clientC

5. Set NTFS permissions on folders where userA has access to clientA,
userB to
clientB and userC to clientC.
6. Installed IIS/FTP
7. Created new FTP site with User Isolation (option 3)
8. Used 'frodo' as my user in setup
9. Downloaded and ran the tool for setting home directories (nice
utility)
10. Successfully ran the adsi commands:

adsutil set /msftpsvc/722635/AllowAnonymous TRUE
adsutil set /msftpsvc/722635/AnonymousOnly FALSE
adsutil set /msftpsvc/722635/AnonymousUserName MyDomain\LowPrivUser
adsutil set /msftpsvc/722635/AnonymousUserPass password

11. Stopped/Started IIS services
12. Went to my ftp url ftp://ftp.mydomain.com

RESULT

On one computer I get 'Internet Explorer cannot display the webpage'.
On another computer (the server) I get a popup that says:

"Windows cannot access this folder. Make sure you typed the file name
correctly
and that you have permission to access folder.

Details:
220 ServU FTP-Server v2.5n for WinSock ready...
530 Sorry, no ANONYMOUS access allowed"

I can't seem to get past that point. Help!

Thanks,

Rob





.

Relevant Pages

  • Re: Microsoft FTP Server problem on W2K?
    ... It is a UNISYS ClearPath mainframe system that is trying to FTP using ... passive mode to a MS FTP server. ... Currently the mainframe FTPs in ACTIVE mode. ... Since the mainframe pushes files to our customers over a WAN connection, ...
    (microsoft.public.inetserver.iis.security)
  • Re: hacked and used for ftp site
    ... only FTP server found is IIS FTP on port TCP 21 and you left that running ... yourself and the files were within your IIS FTP root, ... If you find Serv-U or any other FTP server or trojan running on any other ... port, then a hacker probably remotely ran code on your computer. ...
    (microsoft.public.win2000.security)
  • Re: Isolate users using Active Directory
    ... FTP server you using? ... Set NTFS permissions on folders where userA has access to clientA, ... adsutil set /msftpsvc/722635/AllowAnonymous TRUE ...
    (microsoft.public.inetserver.iis.ftp)
  • RE: FTP Upload
    ... FTP server to the following specified size. ... //set or get the remote path of the FTP server that you want to connect. ... //set the class MessageString. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: FTP Upload
    ... FTP server to the following specified size. ... //set or get the remote path of the FTP server that you want to connect. ... //set the class MessageString. ...
    (microsoft.public.dotnet.framework.aspnet)