Networks

Ask something
Question Locked

FTP Server on Windows 2000 server with Active Directory

0 helpful
8 replies

by henleychad

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I'm trying to set up an FTP server and not allow anonymous access. I set all that up and I was able to log in with admin rights but when I try to make a user with less privledges I cannot log in. I am running a Windows 2000 server which is also the Active Directory Domain Controller. Please tell me if there are some steps that need to be taken to solve this problem. Thanks in advance.

8 replies

by dumphrey

First, file system permissions. Make sure each connecting user has at least read permissions for the directory. Share permissions, is the FTP root a share folder? Are regular users having their FTP root redirected to their home folder? If so, is it working right? What FTP server are you using? IIS? And are you wanting to authenticate against AD?

by henleychad

Well yes I am running the IIS FTP server. and I do want to authenticate against AD. What I did was create a user in AD that was part of the Domain Users group and I want that user to be able to log in to the FTP server. I gave that user permissions on the folder that I used for the FTP root folder. What else would I need to do? Is there certain steps that need to be taken for AD? Im running Windows 2000 server.

Thanks

by cg it

port 20 and 21 are required for FTP.

you should secure FTP with requiring authentication.

If it was me, I'd put the FTP server off the network on a DMZ somewhere.

by dumphrey

try to log in to the FTP server as a non-admin user, do you get any errors in event log? Should be in the System errors I think. Also, check that the user you are trying to acess the ftp server is being authenticated correctly and can access other network resources. your ftp root folder, is it in the middle of a directory that the non-admin user doesnt have access too? Example c:\Foo\Bar is Only admin accessable. But C:\Foo\Bar\Uped is the company ftp root.
Ill go try this out and see if their are any gotchas in IIS5 Ftp. I havent set up IIS in a year or so.

by henleychad

I have tried accessing the FTP with a couple different users set up. All of my users are in AD. The Server running the FTP is the domain controller. Now I have a user set up in the Domain Users group named FTP-user. I set up this user with rights to the FTP root folder (Read rights not full control.) This user is not able to log in to the FTP server.

I also have another user. This user is part of the Administrators group in AD and has full control rights for the Folder and he is able to log in no problem.

If I raise the FTP-user's group assignment to Admin then he is also able to login, as well as when I give him full control of the folder. Problem is that I don't want this user to be an Admin or have full control of the folder.

Isaak you have been very helpful so far Im hoping you can help me find a solution to this problem.

by dumphrey

really sounding like a permission issue. I set up an ftp server on my webserver in server 2003, so a slightly different version of IIS, and it defaulted to using local machine user accounts and not AD. Create a user on the local machine of your FTP server and not in AD. See if they can log in. Also, check to make sure all folders above your ftp root are read and traverse(ubder special permissions)able to the ftp group.

on the sdecurity tab, make sure read & execute, list folder, and read are all three checked. Read by its self wont be enough.

This discussion is closed to new replies.