Solved

Setting up FTP server in SBS 2008

Posted on 2013-06-18
5
1,032 Views
Last Modified: 2013-06-24
Assuming an FTP server setup in SBS 2008 using the "Ftp Service" function under IIS section of the SBS 2008 install disk:

1. Can I give users permissions based upon their user groups and user names?  In other words, if I create a root FTP folder called ABC, which all users have access to, then create a subfolder XYZ that only one group (say Administrators) has access to, do these permissions hold when the folders are being accessed via FTP?

2. The SBS server is on a dynamic IP (no Exchange Server) and this is the only set of folders to which external access is needed.  I'll use a dynamic IP service such as NO-IP.  I want the users to be able to access the folders via their web browser (e.g. ftp.exampledomain.com).  Any problem with this?

Thanks.
David
0
Comment
Question by:DaveWWW
  • 3
  • 2
5 Comments
 
LVL 77

Accepted Solution

by:
Rob Williams earned 500 total points
ID: 39256316
Installing an FTP service on a domain controller is considered extremely risky.  Passwords with FTP are unencrypted, and therefore you have domain passwords being sent over the internet in a very insecure method.  SBS does allow folder shares through RWA using Sharepoint.

This is a very common question and always discouraged.  Also many have difficulty configuring it as noted by the questions in the forum.  The recommended option is to install an FTP service such as Filezilla on a PC using local passwords, rather than domain passwords.
0
 
LVL 77

Assisted Solution

by:Rob Williams
Rob Williams earned 500 total points
ID: 39256350
ps-  Keep in mind also if granting remote users to the domain, they will need a CAL to do so.  A PC with a local account, they do not.
0
 

Author Comment

by:DaveWWW
ID: 39257732
Whether I put FileZilla Server on a separate PC or on the server itself, will remote users of FTP via FileZilla need cals?  Their use of FTP is for viewing Word/Excel docs in the FTP folder.
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 39257755
Anyone accessing the server locally or remotely will need CAL's.
It is also not secure allowing remote access directly to the server.

Accessing a PC using local, not domain, account does not.  Keep in mind it is limited to 10 simultaneous connections.

How much data is there?  You could have a Skydrive site and host it in the cloud.  Up to 7GB is free and more is quite affordable such as an additional 25 GB for $10/year.
0
 

Author Closing Comment

by:DaveWWW
ID: 39271390
Thanks very much - we'll go with a separate local PC.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now