Tuesday, March 18, 2008

How can I setup FTP in IIS such that users are in their home directory when they login?

When anonymous users view the FTP site, they can only view the contents of the root folder. Although they will see the names of the users' subfolders, however, they cannot examine their contents.
1. Create a user account for each of your users.
Note These users need to have the local log on permission. By default, new users belong to the built-in Users group, which has local log on permission.
2. Using the Windows NT Explorer, on a partition formatted with NTFS, give the FTP site's root folder the following security access types:
• Administrators: Full Control
• Everyone: Read
• System: Read
3. Create a subfolder for each user. (These subfolders will inherit the root folder's security settings). Make the following security changes:
• Remove the Everyone group.
• Change the System account's folder's access to Full Control (instead of Read).
• Add the user who will use that folder, and give that user Full Control access.
4. Configure the home page for the user. To do this, follow these steps:
a. In Control Panel, open Administrative Tools.
b. Double-click Computer Management.
c. Expand Local Users and Groups, click Users, right-click the user name, and then click Properties.
d. Click the Profile tab.
e. Make sure that Local path is selected under Home Folder, and then type the appropriate path in the Local path box. For example, type the path as d:\Ftp\FolderName.
Note The user name and the folder name must match. For example, if the user name is JoeUser, the FolderName should also be JoeUser. If the folder name is different, the user will see the same view that is available to Anonymous users. This view is the complete parent folder structure. The user is still denied access to folders to which they are not specifically granted NTFS permissions. However, the parent folder view may be undesirable.

No comments: