FTP acct permissions

**Toon** · October 12th, 2005, 05:39 PM

I have some admin accts to ftp with, and they work fine. However, I need to setup 1 ftp acct that only has access to 1 directory, so when you login through ftp, it is automatically in that directory, and cant change directories.

Im using Windows 2000 Server, and of course FTP through IIS.

Thanks in advance for any help with this

**NooNoo** · October 13th, 2005, 03:14 AM

That's easy enough - set up the account and explicitly set the permissions on the folder... making sure inheritance is off.
more information here and read the link for "access control" as well.

**Toon** · October 13th, 2005, 08:09 AM

Ok, I tried that. The problem is still there, and I cant even seem to get the acct to login to ftp, unless I make it part of a group, like my admin group. Im not sure what Im missing in my setup, but it's doing a good job of not working correctly.

**NooNoo** · October 13th, 2005, 08:35 AM

the user should be part of group everyone... but you can add a user on its own without a group.

Do you have anonymous access on the ftp server?

**Toon** · October 13th, 2005, 08:44 AM

I dont allow anonymous access. I had problems with it before, and I disabled it

**NooNoo** · October 13th, 2005, 08:50 AM

ok so it sounds like an inheritance problem?
you give rights to one directory, but it gets rights to the directories below because rights cascade down the directory tree?

You see, you haven't actually said what the problem is with this user... you said what you wanted to achieve...

**Toon** · October 13th, 2005, 08:57 AM

the user cant login to ftp, at all. I gave the right at the root to allow them to view and read, and all files within inherit those rights. however, I dont want him to be able to view the root. I want him to only go directly to the directory Im setting up for him. I dont want him to be able to change directories to root either.

**NooNoo** · October 13th, 2005, 08:59 AM

set up a virtual folder from the ftp root.

**Toon** · October 13th, 2005, 09:02 AM

Ok, I just created a virtual directory, under the ftp root in IIS. Now what? sorry for all the questions. I never had to do this before

**NooNoo** · October 13th, 2005, 09:58 AM

now add the user to the permissions tab for that directory

**Toon** · October 13th, 2005, 11:13 AM

Ok, I had added the user to the folder I created on the server. I just verified he was still in the security tab for that folder. It still cant ftp in.

Now, I have the virtual folder in IIS pointing to the actual folder on the server, as it should be I guess. On the virtual directory 'Directory Security' tab, I can only add IPs, not user accts individually. Or is that something I dont even need to worry about for this configuration?