IIS FTP - Causes Tech To Beat Head On Wall

[KoWind7]

I'm setting up NT Server 4.0 with IIS as a ftp server for a small company. They want to have each user log in with access to just their directory.

The problem I'm having is that ONLY users with admin rights can log into the server. All others can't log in at all.

I'm beating my head on a wall on this one..

[SubZero]

Here's a list of things to check:

• Check the permissions of the directory under Security/Permissions in the Directory Properties
• Anonymous logins disabled
• Only allow anonymous option disabled

If I can come up with more, I'll post them.

[KoWind7]

The ownership of the directory is the Username.

The permissions are:
Administrator - Full
Username - Read, Write

When trying to ftp into the server, it asks for the name, then the password, then says Username cannot log in.

If I set the User account as someone with Admin. rights, they can log in. But not when they're set as a User...

Any more ideas? Or should I just use a 3rd party ftp server software?

[Lise]

Originally posted by KoWind7:
If I set the User account as someone with Admin. rights, they can log in. But not when they're set as a User...

IIRC, in order for a user to be able to log in to NT IIS FTP, they have to have log on local rights when anonymous access is disabled... We ran into this problem on our server a few months back. If I find that my answer was wrong or I can pull up what our solution was, I'll repost on here...
I seem to remember that we had to allow log on local and change something in the IIS FTP options... If log on local doesn't work, I'll dig up what we found.

HTH

[lysergic]

First do not allow the FTP directory to inharit permissions from the parent directory. Create a new security group for the users if they do not have domain logins (or even if they do. Makes upkeep a little neater). Allow the group to have permission for the FTP directory and the indivual users have permission also for their indiviual directories. And do not all the group to have permissions on any other directory.

[KoWind7]

Thanks guys, I've got it running now.

I didn't realize how many places you had to give permissions...

I really don't like the idea of users being able to logon to the server locally (not a real secure place), even tho they can't really do anything...

[regadp]

You have to give local users the right to
log on to the server. Go to the user rights
policy dialog box and select (Access this
computer from network) this will fix your
problem.