Link to home
Start Free TrialLog in
Avatar of TriumphLTD
TriumphLTDFlag for Afghanistan

asked on

IIS 7 and FTP 7.5 USer Isolation Issue

Hi Everyone,

Here is my sitauation, i've scoured the internet for a solution but found nothing, really hoping someone can help!

    * I have an SBS 2008 server behind an ISA 2006 firewall.
    * I have applied the IIS 7 FTP 7.5 Update on the system and my FTP site works perfectly when user isolation is not enabled.
    * My FTP root is currently set to D:\FTP Sites\ - This site allows annonymouse read access and full admin access, this works perfectly internally and externally.

My site bindings are 192.168.68.3 on port 21 with the host name field left blank.

    * If I enable "Username Directory" isolation and setup a virtual directory to point to a folder with the same username as my login account, the login fails. I just keep getting represented with the password box. This is being tried locally on the server.
    * If I enable "Username Physical Directory" and login I get redirected correctly to the folder \%ftproot%\localdomain\username - this works fine internally and externally.

However the problem is that this setting only works for my adminstrator account (note: this is not the built in one it is the one we created some time ago for administering the system). If I set this up for other users and create the respective folders under \%ftproot%\localdomain\ for thier usernames I cannot login. I just keep getting represented with the password box.

To try and fix this I have cretaed a security group called "FTPusers" and give this group full rights to the FTProot this hasn't helped at all.

Any ideas? I'm totally stuck!

Thanks very much.

Dave
ASKER CERTIFIED SOLUTION
Avatar of Brad Howe
Brad Howe
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of TriumphLTD

ASKER

Excellent solution and an excellent post. Thankyou!
Just so everyone knows the part that fixed this for me was adding each account that needs access into the "FTP Authorization Rules". What have actually done is create a security group called "FTPusers" and added this group into the authorisation rules. Cheers Hades!