Link to home
Start Free TrialLog in
Avatar of Paul-AC
Paul-AC

asked on

Cannot access FTP

Hello All,
I've created an isolation ftp site under Windows 2008 R2, administrator can log in fine without any problem, but other users cannot log in.
they kept getting: 503 User cannot log in, home directory inaccessible.

I have:
h:\FTPHome\LocalUser\Administrator (Administrator has right to this directory)
h:\FTPHome\LocalUser\FTPTest1 (user FTPTest1 has right to this directory)
h:\FTPHome\LocalUser\PaulT (PaulT has right to this directory)

Like I have said, administrator logged in fine, but the other 2 users get the 503 error above.

Thanks for your help.


Avatar of Matthew England
Matthew England
Flag of United States of America image

Sounds like they possibly don't have the rights to Read/Traverse the parent directory tree. What are the permissions on h:\FTPHome\LocalUser\ for your two non-admin users.

You might also want to check the Local Security Policy to ensure Users (or a group containing your FTP Users, is granted the 'Access this computer From the Network' security right (and is not assigned the "Deny access to this computer from the network" security right)

You'll also want to use the Bypass traverse checking security right for your FTP Users. This should prevent the OS from performing security checks up the file structure & will improve performance.
Avatar of Paul-AC
Paul-AC

ASKER

the two non-admin users don't have access to the h:\FTPHome\LocalUser
Should I manually give them rights to the directory?
if this is the case, then I have to do this every time I add new ftp users (that's time consuming, because I create a lot of ftp users).

How do I use "the Bypass traverse checking security right for your FTP Users"?

Thanks
ASKER CERTIFIED SOLUTION
Avatar of Matthew England
Matthew England
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Paul-AC

ASKER

I checked to make sure and yes, the "Users" group have Read, Execute and List Folder Contents to both H:\FTPHome and F:\FTPHome\LocalUser
and both non-admin users are members of the "User" group.
So wonder why it's not working.
Avatar of Paul-AC

ASKER

PacificMIST
I deleted the ftp and recreated and it worked.
on the "Bypass Traverse Checking" option.
it currently has: Administrators, Backup Operators, Everyone, LOCAL SERVICE, NETWORK SERVICE, Users.
Do I need to remove any of these at all?
Thanks
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Paul-AC

ASKER

Thanks