[Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 605
  • Last Modified:

FTP rights (w2k8) VS NTFS rights


I am a little confused about the following and I would appreciate if someone could provide some help.

We would like to install an FTP Windows 2008. The FTP will be managing a shared folder on file server that is permissioned with NTFS.

We have disabled anonymous authentication and enabled basic authentication. Finally we have created a local user account (userftp) with READ/WRITE permissions to the share folder.

I have seen that the USERFTP is able to read/write to the shared folder even thought the local user doesn't have any NFTS rights for that particular share.

Does that make any sense? Can you please clarify?

Thank you.
1 Solution
Probably has something to do with the FTP or IIS service having access to that folder.  With basic authentication it's probably using the ACL for the service account and not the user account.  I don't think the share permissions would have anything to do with it.  I could be wrong.

llaravaAuthor Commented:
What I am trying to understand is how the authorization rules (read/write) interact with NFTS permissions. Which one takes precedence assuming that we are using a windows local account assigned write rights (ftp level) but the same account has NTFS read access to the share.

In IIS 7 you can control this with NTFS permissions. What is likely happening is that the local user account is a member of a group (for example, Users) that has some kind of permission to the folder. This happened in the link below:


Does that link solve your problem too?

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now