ftp issue - windows 2003

hi i have the following domain so far in place:

- windows 2003 ad/dns/dhcp/sp2/admin.pak/suptools server - installed as a 'dc'
- file print/ftp server & sp2 - no admin.pak or suptools installed on this member server
- xp deskop users

i was learning how to setup some basics of the 'ftp' feature on windows 2003, which i decided to install temporarily on my 'file printer/ftp server' as stated above!

step 1 (accessed cmd prompt)

- ftp fileprintserver - enter
- i then logged on successfully with the 'anonymous' account
- password added successfully:  administrator@itservices.local

my instructions then advised me to open up 'ftp sites & select default ftp site',
- select properties
- select 'home directory tab'
- ticked the box for 'write' as 'read & log visits' were already ticked - but apparantely this may still not let everyone connect & write data because it is allowing 'anonymous connections' using the default account:  ' iusr_fileprintserver', which is usually not recommended when allowing 'anonymous users' to be able to 'write' to the system.

- so i selected 'security account tab' - unticked - 'allow anonymous connections'
- click apply/ok.

step 2 (accessed cmd prompt)

i then repeated the process

ftp fileprintserver - enter
logged in with: administrator
password: administrator@itservices.local & tried my domain admin password - but login failed!!

qns1.  does anyone know why i cannot login or should i have to install 'admin.pak/sup tools' ?
mikey250Asked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
BlueComputeConnect With a Mentor Commented:
Are you working to Microsoft's instructions here: http://support.microsoft.com/kb/323384 ? If not, can you link the instructions you're working to, so I can see where you are at the moment?
I'd check out this document here:
http://technet.microsoft.com/en-us/library/cc786143(v=ws.10).aspx
as you need give the user in question permissions on the home folder, and disable "only anonymous". Access control, once enabled, works is based on the Security settings of the folder in question - it's also worth checking the Application and Security logs at the time you tried to make the connection, something's usually logged in one or both of these.
0
 
Frosty555Commented:
I can't help you too much with using the Windows built-in FTP server, but I can sympathize that I've had all sorts of trouble making it work properly too. It was tremendously annoying and configuring simple things like user accounts and access permissions, or things like SFTP was a pain because of Microsoft trying to "marry" their existing NTFS style permission structure with the much simpler and different FTP protocol.

In the end.... I switched to a third party free FTP server and never looked back.

FileZilla FTP Server - http://filezilla-project.org/download.php?type=server
0
 
mikey250Author Commented:
hi frosty555, i do realise that others do use '3rd part ftp', but as an 'os' i just wanted to do this!
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
giltjrCommented:
I'm a bit confused as to how you tried to log-in.  Here what you you stated:

"ftp fileprintserver - enter
logged in with: administrator
password: administrator@itservices.local & tried my domain admin password - but login failed!!"

To me it looked like you used the user-id "administrator" and then entered "administrator@itservices.local" and your domain admin password.

Is your domain user-id "administrator?"  If not then you need to use your domain admin user-id when prompted for your user-id and your password when promoted for that.
0
 
mikey250Author Commented:
hi giltjr,

the instructions ive got was showing me to logon 'anonymously' with administrator logon & password used as: administrator@itservices.local - this was successful

then the next instruction was as below:

open up 'ftp sites & select default ftp site',
- select properties
- select 'home directory tab'
- ticked the box for 'write' as 'read & log visits' were already ticked - but apparantely this may still not let everyone connect & write data because it is allowing 'anonymous connections' using the default account:  ' iusr_fileprintserver', which is usually not recommended when allowing 'anonymous users' to be able to 'write' to the system.

- so i selected 'security account tab' - unticked - 'allow anonymous connections'
- click apply/ok.

or is the 'iusr_fileprintserver' the actual account and in which case what is the password ?
0
 
mikey250Author Commented:
hi bluecompute,

(ive been whatching a video showing that both work as below but only 'anonymous' works)!

the 'url' appears to be what i did using the only account i currently have ie the administrator domain logon on my member server and once it works i can allocate a new admin account separate from main domain administrator.
0
 
Rick HobbsConnect With a Mentor RETIREDCommented:
As username try "domain\username"  and then your domain password.
0
 
mikey250Author Commented:
so instead of typing in exactly the same format for 'anonymous'  which was successful - you say i should type exactly as:

- itservices\administrator & then password ?
0
 
BlueComputeConnect With a Mentor Commented:
What Rick said ^^ - use ITSERVICES\administrator rather than administrator@itservices.local
0
 
Rick HobbsRETIREDCommented:
That is correct, sir.
0
 
BlueComputeConnect With a Mentor Commented:
Yup, then you should be golden. The only place it checks permissions is against the NTFS permissins on the Home directory, C:\inetpub\ftproot by default, and you domain admin's bound to have permissions on this folder.
0
 
mikey250Author Commented:
supurb, ok i will try this either later on or tomorrow and get back to you! much appreciated

the other thing i was wondering about is that, is there a simpler way of doing this with win 2003 or should i just continue with the instructions of my video as the next stage is showing me how to create a folder in the ftp etc but i could not do this bit as i had not resolved the: administrator logon part, but as ive now been told i will try this and continue hopefully!
0
 
mikey250Author Commented:
hi giltjr, yes logging on with:

username: itservices\administrator
pw:xxxx

yes it worked so thanks!!!

q1. the other thing i was wondering about is that, is there another way to do this or is this the normal way of doing this ?

q2. also my instructions on video for the next stage show me how to create a folder in the ftp, but is this the norm or can this be done another way ?
0
 
Rick HobbsConnect With a Mentor RETIREDCommented:
1.  That is the normal way on Windows FTP servers.

2. That is the normal way on Windows FTP servers.
0
 
mikey250Author Commented:
are there any changes on windows 2008 or 2012 for ftp ?

although i presume there are many many changes on both win 2008/2012 overall compared with win 2003 unless it is mainly the look and feel of the 'gui' ?
0
 
Rick HobbsConnect With a Mentor RETIREDCommented:
The FTP service operation and configuration hasn't changed.
0
 
mikey250Author Commented:
ok good!! :)
0
 
mikey250Author Commented:
sound advice !
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.