FTP server rights under Win2000

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Hi, my name's Philipp Ritter!

Ive got the following situation on one of our Win2000 machines:

An IIS 5 with the standard FTP site and some virtual folders. The
destination folders on which the virtual folders point have one user
each with change rights assigned. Our customers use those accounts to
log onto our server.
Those users have no group assigned to, they are only assigned in the
security settings of their own folders.
Our customers dont know the names of their virtual folders among each
other. But it is still possible, in bad faith or by accident, to
access the virtual folders of another customer just by typing the
associated virtual folder name in their ftp client, so they can
delete, change or write something in a folder which doesnt belong to
them.
But NTFS folder rights only allow to change something in this folder
for the assigned customer who should have access. Whats wrong here?

And which importance have the rights, which can be set in a FTP site
respectively a virtual folder?
A higher or a lower priority than the NTFS rights?

Thanks!!

.

Relevant Pages

  • ISS security problem
    ... i would like and verify NTFS permissions first. ... >Having huge problem vith virtual folders on my IIS 6.0 ... and local user) but every time ... >Logging into a default ftp site with the same users work ...
    (microsoft.public.inetserver.iis.security)
  • Managing multiple instances of an asp.net application
    ... had to setup multiple versions for multiple customers, ... of the application folder and created virtual folders for each ... This is ok for a small number of customers but not if the ... The instances differ only in their web.config. ...
    (microsoft.public.dotnet.framework.aspnet)