We help IT Professionals succeed at work.

Setting up IIS7 FTP with multiple users

Hi Experts,

Can anyone provide me with some pointers on how to setup IIS7 on Windows Web Server 2008 so that multiple users can access the same site but go to their own home directory.

I already have this setup and working using a /HOMEDIR/LocalUsers/username structure in the FTP root of the FTP site. I know that in past versions of IIS FTP, you always had to have an actual Windows account to be able to login. With IIS 7, IIS Manager accounts were introduced. Are these to add security by not requiring an actual Windows account on the server for FTP users, or are they only for managing IIS sites? If they are for both, is it safe to use IIS manager accounts for FTP login? Also, if it is possible, how do you set it up?

Thanks!
JB
Comment
Watch Question

Top Expert 2008
Commented:
Hello,

yes, you can get that functionality with IIS manager accounts.

from the horse's mouth:  http://www.iis.net/articles/view.aspx/IIS7/Managing-IIS7/Using-FTP-Server-in-IIS7/Configure-IIS-Manager-Authentication

Cheers.
BRONZE EXPERT

Author

Commented:
I've actually gone through all those steps a few days ago playing around with it and couldn't get it to work... I don't know if I made a mistake or if it's just because it's in RC stage instead of an official release.

Just out of curiousity, do you know what the particular security advantages/disadvantages of using IIS manager authentication are?
Top Expert 2008
Commented:
Hi,

IIS Manager authentication is designed as a remote administration delegation framework for IIS.  It is really meant to be used to delegate administrative control of IIS sites and content.

The main advantage is therefore tight integration with IIS and granular control of various web site configurations.  The downside is that to the OS, there is only one user - so you can't grant (or deny) access to specific system resources based on an individual IIS manager user.

Cheers.
 
BRONZE EXPERT

Author

Commented:
Cool! So basically, if we're looking at integrating it with AD or local accounts, there is no point in messing with IIS manager accounts?
Top Expert 2008

Commented:
Yes, I would agree with that statement.

Cheers.

Explore More ContentExplore courses, solutions, and other research materials related to this topic.