Discussion Locked

Password Security for FTP-only users/IIS

0 helpful
3 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

This has to have come up before, but I have never seen it addressed. Bear with me. Here is the situation-

Internet web server(firewall protected) serves web sites. Developer/web masters use IIS/FTP exclusively to update content and so forth. I want to force password aging, and other password constraints. I know how do set that up, but how does the end user change his password if all he does is ftp? There is no ftp provision for password changing in IIS(non-admin people)... is there? They will not get prompted when their passwords expire or are about to. It will simply lock them out.

There is no domain structure present, the developer people in question are coming from the internet.
The server in question is Windows 2000 Server OS SP1, mostly vanilla install.

-Ed Clint

3 replies

by maestrog

Can you test the idea with a temp user and expire it's password? I thought with FTP (at least at the command prompt/command line as opposed to IE) it would prompt you when your password needed to be changed. I could almost swear on it. That was with IIS 4.0 on NT Server. Don't know how things changed in that respect for Win2000 Server and IIS 5. Also don't know how it handles when using Internet Explorer as opposed to command line.

I'd just test, test, test myself. There are also a lotof articles in Microsoft's TechNet that might just answer your question. It may be worth it to scour the KB.

Good Luck...
G

This discussion is closed to new replies.