IIS7 FTP default folder

IIS' FTP Service functionality with virtual directories functions as it has in previous versions.  The functionality has not changed since IIS6.  How you configure it in 6 and 7 is essentially the same, the configuration has changed under IIS8+

Here is how I setup an IIS FTP Service on IIS7 & greater...

Assumptions:
0.  we are talking about IIS7 without the out-of-band FTP v7.5 service installed
-----  if the this is IIS7 with FTP v7.5 installed, the IIS Manager process is a bit different.
1.  the ftp site will be called ftp.mycompany.com
2.  there is a second partition available on the IIS server
2a.  if there is only a C: drive, substitute C: for D:

On the Local IIS Server:
1. create a group called "ftp-mycompany-com_Read"
1a.  add all Domain User Account (or local user accounts) that require login access and Read-Only to the FTP Site
2. create a group called "ftp-mycompany-com_ReadWrite"
2a.  add all Domain User Account (or local user accounts) that require login access and Read&Write access to the FTP Site

In the file system:
3.  On the D: Drive, create a directory called webapps
4.  under "webapps," create a directory called "ftp"
5.  under "ftp," create a directory called "ftp.mycompany.com"
5a.  In the NTFS permissions for the directory "ftp.mycompany.com," grant:
5a--  the group "ftp-mycompany-com_Read" Read permissions on this directory as all subdirs/files
6.  under "ftp.mycompany.com," create the following directories
6a.  "_blank-root"
6a--  it is my not so humble opinion, that no one should ever write into the root of an ftp site. Users are only granted READ permissions (at the NTFS level and IIS FTP level) to traverse the root if they must.
6b.  "users"
6b.--  In the NTFS permissions for the directory "users," grant:
6b.----  the group "ftp-mycompany-com_ReadWrite" Modify/Change permissions on this directory as all subdirs/files
7.  under "users," create all the required user named directories
7a.  for example, create a directory called, "jsmith"

* At this point, IIS only sees an empty root directory
** At no point should the "users" directory be directly visible to the FTP Site, this would defeat the purpose of this config

In IIS 6.0 Manager (FTP Service v7.0 is basically IIS 6 FTP):
8.  create a new FTP Site, name it "ftp.mycompany.com"
9.  add a description, Next
10.  select a specific IP address to assign to the FTP Service (no "All Unassigned"), Next
11.  select "Isolate Users", Next
12.  select the directory created in step 4a (D:\webapps\ftp\ftp.mycompany.com\_blank-root), Next
13.  select only "Read" permissions, Next
14.  on the newly create FTP Site, update the following settings:
14a.  right-click the site and select Properties, enable logging
14b.  under Logging Properties General Tab, select daily for new log schedule, user local time for rollover, set the log file directory
14c.  under Logging Properties Advanced Tab, select ALL fields to be included in the logs.  OK out.
14d.  since there will be no anonymous access, uncheck "Allow anonymous connections" under the Security Accounts tab.
14e.  under Messages tab, modify the banners if necessary
14f.  under Home Directory, switch the directory listing style to UNIX (just my preference)
14g.  under Directory Security tab, leave as is

15.  right-click the newly created FTP Site, select "New" and "Virtual Directory"
16.  give the Virtual Directory an alias from step 5a, name it "jsmith"
17.  select the path of the Virtual Directory from step 5a (D:\webapps\ftp\ftp.mycompany.com\users\jsmith), Next
18.  select both read and write perimssions for this Virtual Directory, Next

As a test, a user account that is a member of either the groups created in steps 1 & 2, should be able to login and automatically land in their respective named Virtual Directory.

If this is really IIS 7.5 or greater, the step in IIS Manager are somewhat different.  Below are links for IIS7 and IIS7.5+...

Links:

Default FTP service = https://www.experts-exchange.com/questions/21866201/home-directory-inaccessible-unable-to-login-FTP-server-on-IIS-6-0.html
IIS 7 w/ FTP 7.5 = http://www.iis.net/learn/publish/using-the-ftp-service/configuring-ftp-user-isolation-in-iis-7

PS:  it would be helpful to which FTP Service is installed.

Dan

I appreciate you taking the time to type all that up, but I guess what I am looking for is to try and mix the settings.
I need for some accounts to land in the root and others to land in specific folders.

We already have several projects setup and working, so I was hoping to try and not go back and change the "Isolation" setting on the ftp service, just cause some accounts to land in specific folders.

Thank You.

First, what is the version of the FTP Service that is being used?  Functionally it makes a big difference.

In general, in FTP Service 7.5+, if you configure the "Do not isolate users.  Start users in:" option to go into their User name directory, and there is no user named directory.. those users fall into the root.

In general, mixing and matching is not allows an option.  Often it is either one way or the other.

Another reference link: http://support.orcsweb.com/KB/a338/create-an-iis-75-ftp-site-windows-server-2008-r2.aspx

Dan

"... In general, mixing and matching is not allows an option.  Often it is either one way or the other...."

That's what I need to know, a lot of server techs here just load "Server-Zilla", but I was trying to stay away from 3rd party software.

Help from the IIS Manager...
   Internet Information Services (Version 7.5.7600 ...)

So.  I can update the steps to account for FTP 7.5.  But if you desire a mix and matc setup, you can deploy another FTP site in IIS with isolation enabled and leave the previously configured FTP site running.

You could also try turning on isolation and then, for accounts that should land in the root directory, just configure that accounts home directory to be the root.  As an option.

Dan

"... configure that accounts home directory to be the root."

How do you do that, I thought w/Isolation, your clients ended up in a folder named after the login ?
Like its hard coded into the ftp service ?

Thanks

Dan, I will test and get back to you.

Thanks for the help and sorry for leaving this question open so long.