Windows Forum

Ask something
Discussion Locked

FTP login

0 helpful
3 replies

by cricket_moon

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Hey there. We need to set up a log on for FTP on a windows 2000 server with IIS5. I need to be able to shut off anonymous, and have the user enter a username and password, but not log in to our domain. Any ideas?

3 replies

by joseph moore

Well, the answer is easy then. Make sure that this FTP server has TCP port 139 blocked from Internet access. Do that, and then people with valid user accounts could not try to connect to the machine (by authenticating to the IPC$) or map drives.
If you do not have a firewall you can put in front of the FTP server, then set up IP filtering on the Internet-side NIC to only allow ports 20 & 21 for FTP.
Then, set up the NTFS permissions on the FTP folders giving the user accounts the right permissions.
Next, make sure these FTP user accounts do NOT have any rights to the rest of the machine (in NTFS Security). YOu can put them in their own group, then Deny this group rights to the whole drive, except for the FTP folders.
And I take it you know how to disable Anonymous access in ISM snap-in.
Last, I would Disable the IUSR_machinename user account.

hope this all helps

by cricket_moon

Maybe easy answer, but it seems woefully complicated for our needs. I turned off anonymous access in IIS 5, gave the local user account the rights to log on locally, and gave it access to the correct folders. Thanks for your help though. :-)

This discussion is closed to new replies.