Link to home
Start Free TrialLog in
Avatar of AltaSens
AltaSensFlag for United States of America

asked on

Setting up user isolation and folder structure for Microsoft IIS 7.5 FTP Server

I am trying to setup a new FTP server using IIS 7.5.  In this environment, there will be about 10 users which will need to remain separate and so I am planning to use user-isolation mode.  I also need to have one general/admin user that will have access to the LocalUser root and am not sure how to do this.  

The proposed folder structure would look something like this:

\inetpub\LocalUser
  \user1
  \user2
  \user3
  \Public  (for anonymous users)

What steps do I need to do in order to provide the admin user with access to the LocalUser root with user isolation mode active?  Would setting up a hard link work (e.g. MKLINK /D /H /J adminuser \inetpub\LocalUser)?  

Note, this is not an active directory environment.

Also, on a related note, when I attempt to test what I have setup now, my FTP client connects then the session is immediately dropped by the remote host.  Is there any way to turn up the logging level so I can see why sessions are getting dropped?

Thanks for the help here!
Avatar of imanushin
imanushin

If you want to use IIS 7.5 in Windows 7, you can only bind directory to window user/group and user Windows Authentication.
If you want to user IIS 7.5 in Windows Server 2008 R2, you can add custom users in IIS and don`t user Windows Authntication

If you want to use ftp and auth with non-windows users, I agree you user FileZilla FTP Server. It can do it and it is free.
Avatar of AltaSens

ASKER

this is Windows Server 2008R2, server is not a member of the domain.

I am not sure how to add custom users in IIS, is this straightforward?
ASKER CERTIFIED SOLUTION
Avatar of Brad Howe
Brad Howe
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Hades -  you da man, that worked great!  Would it also work to use a file-system hard link?  I thought I had seen this before.
Glad it works for you.

I am not understandind what you mean about file-system hardlink?

Hades666
Windows 2000 and higher supports directory symbolic links, where a directory serves as a symbolic link to another directory on the computer. For example, if the directory D:\SYMLINK specified C:\WINNT\SYSTEM32 as its target, then an application accessing D:\SYMLINK\DRIVERS would in reality be accessing C:\WINNT\SYSTEM32\DRIVERS. Directory symbolic links are known as NTFS junctions in Windows.

Well, it seemed like a good idea but it didn't work so I'm going with the virtual directory idea.
THANK YOU!
Hm... Like the mklink feature of Vista/Win7.

I'll have to give this a shot. If i get it working, I'll let you know.

Cheers,
Hades666
#Hades666 Did you get mklink to work?

I have a Server 2008 FTP server with user isolation and domain user accounts. Two different accounts must write to one and the same folder. I wonder if I could solve this using a hardlink / mklink. I don't have a test lab at the moment to test this, so I was wondering if you got this to work.