I have 3 domain controllers on the network. On one of them, I have ftp setup for specific users that have only basic rights (part of the Domain Users and FTP groups). When they ftp into the machine, it gives them access denied.
I have made sure that they have rights to the directory that they are logging in to and I have set up the Security Policies. I have found that the Domain Controller Security Policy overrides the Domain Security Policy which overrides the Local Security Policy. So, I disabled “Log on Locally” in the Domain Controller Security Policy and the Domain Security Policy and set up the Local Security Policy to allow these users access (Log on Locally). Then I run the “secedit /refreshpolicy machine_policy /enforce”command to update the servers.
They are able to ftp into the machine for awhile….. then I’ll come in the next day and they’ll be getting the same error.
I’ve tried giving the FTP group the Log on Locally right in all the security policies to no avail (again, it will work for awhile and then stop). I would appreciate any help on this… this problem is driving me crazy.