Solved

530 User cannot login, home directory inaccessible

Posted on 2016-10-28
18
70 Views
Last Modified: 2016-11-11
FTP on II6 with NTFS permissions to home directories are in place.  ALL PORTS on Firewall are in place ALL NAT rules on firewall are in place.  This has been working fine until we installed WS_FTP to this server and ran a few modules.  Im not sure what broke bc all the FTP sites in IIS look fine.  The permissions look OK.  I have the application pool identity set with permissions to the folders.  SO unsure what happened but users get the error now when they log into port 21 FTP
0
Comment
Question by:Twhite0909
  • 9
  • 9
18 Comments
 
LVL 19

Expert Comment

by:Zaheer Iqbal
ID: 41864052
0
 

Author Comment

by:Twhite0909
ID: 41864065
Well here is the kicker. 1 account works fine.  the others do not and any news accounts get same error.  The one account is identical in eveyrway (it seems) I am just trying to pur over it all to see what did I miss?
0
 
LVL 19

Expert Comment

by:Zaheer Iqbal
ID: 41864067
Is this account have any special access rights to the data area ?
A security group it is part of?
0
Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

 

Author Comment

by:Twhite0909
ID: 41864084
I also tried the link. Good shot but still nogo after adding FTP auth rule to allow all users read/write then restarting the FTP service
0
 
LVL 19

Expert Comment

by:Zaheer Iqbal
ID: 41864090
what happens if you try locally accessing the ftp site, ie local network ?
restart the server fully.
0
 

Author Comment

by:Twhite0909
ID: 41864091
No it is not a member of any group besides local users.  As you can see in the attached
FTPUserAccounts.png
0
 

Author Comment

by:Twhite0909
ID: 41864094
accessing it locally from my own network it sits on I get the exact same error
0
 
LVL 19

Expert Comment

by:Zaheer Iqbal
ID: 41864096
OK so this is not a domain based server ?
What is the security on the folders / share ?
0
 

Author Comment

by:Twhite0909
ID: 41864097
If you help me solve this then your on my xmas list!!!!
1
 
LVL 19

Expert Comment

by:Zaheer Iqbal
ID: 41864099
Well ill try my best.
Has any other changes been made ie deletion and recreation of accounts ?
The one account that works is there any difference with the other accounts that you can see.
0
 

Author Comment

by:Twhite0909
ID: 41864104
yes this is a domain based server.  its is a win 2008 r2 server joined to our domain.  USes MS FTP and IIS6.  I didnt mean to confuse things with my wording of "my network" before. Attached are the folder permissions
ftp-folder-permissions.png
0
 

Author Comment

by:Twhite0909
ID: 41864105
as far as differences between the two accounts athere are none I can see
0
 
LVL 19

Expert Comment

by:Zaheer Iqbal
ID: 41864106
ok and the port has not changed from 21 to sftp has it ?
0
 
LVL 19

Expert Comment

by:Zaheer Iqbal
ID: 41864108
So are users local or domain users ?
0
 
LVL 19

Expert Comment

by:Zaheer Iqbal
ID: 41864117
Check the number of characters in your hostname, if it is more than 15 characters. Change the hostname to one it has less than 15 char

Check the physical path for FTP sites in IIS > Web sites > IP address > Basic settings > Physical Path.

Is there any reason why you cannot start over again.?

Remove FTP publishing from the site.
Restart IIS
Verify that the users have proper permissions to the folder you want them to use.
Add FTP publishing back to the site.
Add the user to the ftp authorization rules.
0
 
LVL 19

Accepted Solution

by:
Zaheer Iqbal earned 500 total points
ID: 41864127
Also how has FTP user isolation been configured?
0
 

Assisted Solution

by:Twhite0909
Twhite0909 earned 0 total points
ID: 41864152
Users for FTP are created locally on the server

FTP User isolation has been configured to Isolate Users. User Name Directory (Disable global directories)

BC the one user account that sends files 3 times a day is working mgmt does not want us  creating another FTP and starting again.
0
 

Author Closing Comment

by:Twhite0909
ID: 41884034
ytujytjghb
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

A phishing scam that claims a recipient’s credit card details have been “suspended” is the latest trend in spoof emails.
Preparing an email is something we should all take special care with – especially when the email is for somebody you may not know very well. The pressures of everyday working life stacked with a hectic office environment can make this a real challen…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question