• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 212
  • Last Modified:

How to create domain user accounts with limited permission?

Hi guys,

I need to create two user accounts.

UserA should be a ‘pure’ FTP user account. This user should only be allowed to access a specific folder on our FTP but prohibited access to log on the domain and web. UserB should only allow access to a specific folder on the web etc. www.domain.com/userb - but prohibited to access any other domain related issues.

I have tried to create a new OU, with the new users – but they can only work partly when they are members ‘domain users’ and by allowing them membership of this group, they have access just like the other domain users ;(

We’re running W2K servers/SP4, IIS 5.

Thanks in advance ;)
1 Solution
Chris DentPowerShell DeveloperCommented:


This is how I normally create FTP Acccounts:

1. Create the account in AD, adding it to an FTP Users Group.
2. Set FTP Users Group as Primary Group in Active Directory - This allows you to remove them from the Domain Users Group.
3. On the FTP Server, make sure FTP Users Group has Read access to the FTP Root Folder - For me this is just a seperate folder on the server - nothing inside it.
4. Give the users at least Read access to their home folder wherever you put it.

Web Users are easier, they don't really need anything but the right permissions on the web folders and making sure the anonymous user doesn't see what you don't want it to.


dsl77Author Commented:
Hi Chris,

I have created a new OU ‘FTP_GUESTS’ inside a single user ‘ftpguest’.

The user has read access to C:\Inetpub & C:\Inetpub\ftproot

I’m getting the ‘530 user … ‘ error

Don’t know if it’s worth mention that I’m now running 2003 Server all over the domain and IIS 6.

Wayne BarronCommented:
No comment has been added to this question in more than 21 days, so it is now classified as abandoned..
I will leave the following recommendation for this question in the Cleanup topic area:
[Accept: Chris-Dent] (User changed Operating System's after getting Information from [Chris-Dent]
I suggest Awarding [Chris-Dent] the points for his information on setting up Win2k (not) Win2k3)

Any objections should be posted here in the next 4 days. After that time, the question will be closed.

EE Cleanup Volunteer

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now