FTP server on WinXPP Client PC ... logon no longer works



Hi!

I don't know when or how this happened, but suspect it might be related to
recently applied Windows Updates.

8 Client PCs managed by a SBS2003 Premium Server (about 20 devices on the
LAN) ... remote access is provided by a Hardware VPN Router directly to
Local LAN (SBS VPN is not used for this connection) for about 40 additional
users ... intended to connect to both Domain managed and non-Domain managed
resources.

There is an IIS server running on one of the Windows XP PCs ... this PC was
being used as an FTP server successfully by VPN connected users until a few
weeks ago. This server recently stopped allowing valid logons.

There is one exception ... my own UserID (Local on the FTP server PC) ...
after I 'reset' the password ... to the same password string ... this UserID
did could not logon to the FTP server until after a 'password reset'. I am
pretty sure that the FTP server was accepting DOMAIN UserID : Passwords
until just recently, now it only seems to accept Local UserID : Passwords
(after password reset).

I think this is probably a security policy problem ... I removed and
re-installed IIS to see if that would clear up the problem ... it didn't.

I think I can 'cure' the problem by adding Local UserIDs for the Domain
Users that need to access the FTP server, and reseting those passwords as
needed ... but am unable to add more users from the Local PC Control Panel
(I think because of the SBS default security policy) ... at least not using
Remote access to log on to the PC.

Has anyone seen this kind of problem before ... or have any suggestions
about how to get this FTP server working properly again ... preferably
without me having to drive to the site to use the console logon.


--
Blondie
Please reply to newsgroup
email replies will not be delivered


.



Relevant Pages

  • Re: ssh bypassing OS procedures?
    ... > passwords every thirty days, the OS will lock the user account. ... > he can still ssh into the system via private key authentication. ... Why are you giving user accounts on your ftp server? ...
    (comp.security.ssh)
  • Re: ssh bypassing OS procedures?
    ... >> I have a ftp server setup so that if the users don't change their ... >> passwords every thirty days, the OS will lock the user account. ... >> he can still ssh into the system via private key authentication. ... > should *NEVER* have user accounts with the same passwords as the ftp ...
    (comp.security.ssh)
  • Re: How safe are FTP servers?
    ... I've been using that FTP server for years, ... To the OP, if you're only *sending* files to your clients, as someone ... Whether these passwords are likely to be intercepted at any ... and the network it's on, the server and the network it's on, and all ...
    (comp.os.linux.security)
  • Re: FTP and security
    ... >Remember also that FTP is not designed to be 'secure' as ... >it passes usernames and passwords in clear text. ... >someone between the FTP server and whereever the client ...
    (microsoft.public.windowsxp.security_admin)
  • FTP server on 5.3
    ... I was trying to setup an FTP server last night on my 5.3 box. ... if I can safley delete the .* files in his home dirrectory. ... accounts but pull usernames and passwords from a MySQL database. ...
    (freebsd-questions)