asked on

powershell ftp user creation

I am attempting to create a FTP dir and FTP user. I need to give full control of the created directory to the newly created user and add the user to the FTP users group. I need to remove view/list permissions for the newly created dir from the FTP users group. Finally I need to be able to run the ps1 script from a local machine and have it execute on the remote system. Here is the code I have so far.

" -------------------------------------------"
" ## FTP VIRTUAL DIRECTORY CREATION SCRIPT ##"
""
""
" ## This script will create a new username, password, local directory, and virtual directory for a client "
""
" ## Please enter the following information "
""
" -------------------------------------------"

### PowerShell Script
### Create local User Acount

$AccountName = Read-Host "Please enter user account name (i.e. krisp)"
$FullName = Read-Host "Please enter the full name (i.e. Kris)"
$Description = Read-Host "Please enter the description (i.e. Krisp FTP Login)"
$Password = Read-Host "Please enter a password"
$Computer = "server.company.net"
$Remote = "\\server.company.net"
"Creating user on $Computer"

# Access to Container using the COM library
$Container = [ADSI] "WinNT://$Computer"

# Create User
$objUser = $Container.Create("user", $Accountname)
$objUser.Put("Fullname", $FullName)
$objUser.Put("Description", $Description)

# Set Password
$objUser.SetPassword($Password)

# Save Changes
$objUser.SetInfo()

# Add User Flags
# The numbers are bitwise - 65536 is Password Never Expires ; 64 is User Cannot Change Password

$objUser.userflags = 65536 -bor 64
$objUser.SetInfo()

"User $AccountName created!"
" ------------------------"

# ---Create FTP local directory---

"Creating directory server.company.net\E\SecureFtpSite\Support\$AccountName"

New-Item \\server.company.net\E\SecureFtpSite\Support\$AccountName -type directory
Start-Sleep -Seconds 5
"Directory $AccountName created!"
" ------------------------"

# ---Set Permissions on Folder

"Setting Permissions on server.company.net\E\SecureFtpSite\Support\$AccountName"

$colRights = [System.Security.AccessControl.FileSystemRights]"Modify"
$Inherit = [System.Security.AccessControl.InheritanceFlags]"ContainerInherit, ObjectInherit"
$Propagate = [System.Security.AccessControl.PropagationFlags]::None
$objType =[System.Security.AccessControl.AccessControlType]::Allow
$User = New-Object System.Security.Principal.NTAccount("$Computer\$AccountName")
$objACE = New-Object System.Security.AccessControl.FileSystemAccessRule($User, $colRights , $Inherit, $Propagate, $objType)

$objACL = Get-Acl "\\server.company.net\E\SecureFtpSite\Support\$AccountName"
$objACL.AddAccessRule.($objACE)

Set-Acl "\\server.company.net\E\SecureFtpSite\Support\$AccountName" $objACL

icacls "\\server.company.net\E\SecureFtpSite\Support\$AccountName" /inheritance:d

icacls "\\server.company.net\E\SecureFtpSite\Support\$AccountName" /remove "FTP Users"

Start-Sleep -Seconds 5

"Permissions Successfully Applied!"
" ------------------------"

# ---Add User to FTP Users Local Group

"Adding User to FTP Users Group"

$group = [ADSI]"WinNT://$Computer/FTP Users"
$group.add("WinNT:$Computer/$AccountName")

"User Added!"
"-------------------------"

When I run this code locally I get the following results
1.       User is successfully created
2.      Dir is successfully created
3.      User is unsuccessfully added to the permission set for the new dir
4.      User is unsuccessfully added to the ftp group
5. FTP group is being added to the permission set for the newly created dir, they need to be removed.
A tall order I know but any help would be GREATLY appreciated

rlandquist

To add the user to the FTP Users Group try this:

$objUser = [ADSI]("WinNT://$Computer/$AccountName")
$objGroup = [ADSI]("WinNT://$Computer/FTP Users")

$objGroup.PSBase.Invoke("Add",$objUser.PSBase.Path)