Windows Forum

Ask something
Discussion Locked

FTP Server vs AD Round 2

0 helpful
4 replies

by aaron_wurthmann

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Background:
All win2k enviroment, the clients are on SP2, and all servers are on SP1. Ftp/Intranet/File server serves files through the web site depending on where the users are coming from, LAN or VPN, the links on the web page change. If the useris on the LAN then the links are NetBios (file://machine/share) but if they are VPN then the links are FTP (ftp://domain%5C/user@machine/)

All of the above works flawlessly.

Problem:
The VPN users are directed to the file server via FTP. (by the way, we have found that with the amount of VPN users and sites that we have that this is faster and easier then NetBios shares). Once they are in the FTP session they have the usual rights that one would expect depending on group membership. At this point I should specify that this is an FTP session using Explorer and not a command line session. However in a short undetermined period of time while they are still in the session their NT accounts gets locked out. What in the heck is up with that? I reviewed the sessions limits for both the site and the default and set both to 3,600 seconds but my users are still getting locked out. Even stranger is that even though they are locked out they can still browse the FTP server. huh! Please help, I have a plan B, but it isn't as pretty as plan A.

4 replies

by cportman

What happens if you use a standard ftp program instead of explorer? Perhaps explorer is constantly trying to authenticate them, which causes their accounts to get locked, but they still have their session ticket to get access. I would see what happens with a standard FTP program then try IE 6.0 and see if the same stuff happens.

Good Luck

by aaron_wurthmann

I don't remember how I fixed this or even if I fixed this. I think it had something to do with sales guys being retarded and that their local account cached passwords didn't match their current domain passwords and when they changed dirs it sent that info. Or something to that affect.

by aaron_wurthmann

cportman,

I'll give that a try. It would be good test. I think that I already tried it out with just the basic cmd line ftp and I didn't get the same result. So I'll try that out as well as try ftp from WsFTP or CuteFTP and see what happens. I don't much care for IE 6 (on windows 2000) so I'll try IE 5.5 SP2 and then maybe IE 6 on a Window XP machine too. Thanks I'll let you know what happens.

This discussion is closed to new replies.