Please explain IIS FTP server to me (IIS n00b needs help) *with pic*

[MichaelD]

I loaded IIS on one of my boxes b/c I wanted to use a utility that needed IIS. Fine. While poking around in IIS, I noticed it has a built-in FTP server.

But you can only put one account in there...but in order to put an account for access in, you have to check "Allow Anonymous Connections."

Like this.


What I WANT TO DO is have an FTP site that you can only access if you have a username and password that I assign. NO anonymous access.

Advice, please.

 

[JonnyBlaze]

you setup the users the same place you setup windows users.

JB

 

[MichaelD]

Originally posted by: JonnyBlaze
you setup the users the same place you setup windows users.

JB

Thanks JB. Yeah, I figured that much out on my own. 😉 You have to create Users of some kind and then you add them.

My question is about security; the IIS window (screenie posted above) confuses me. Does EVERYONE have access to my FTP or only those that have accounts on the local box?

Thanks.

 

[MichaelD]

^^^^^

 

[MrChad]

1. Disable anonymous access.
2. Set up your FTP accounts as Windows users.
3. Give your Windows users the appropriate permissions within your FTP folder.

Only valid Windows accounts on your box will be able to connect to the FTP, and they will only be able to access what NTFS permissions allow.

 

[UCJefe]

Right in your case, you had anonymous access enabled which means that anybody could connect and they have all the rights of whatever user you put in the box. So in your case, anyone in the world could connect and do whatever Xeon could on your machine. Probably not what you were intending.

 

[MichaelD]

Originally posted by: MrChad
1. Disable anonymous access.
2. Set up your FTP accounts as Windows users.
3. Give your Windows users the appropriate permissions within your FTP folder.

Only valid Windows accounts on your box will be able to connect to the FTP, and they will only be able to access what NTFS permissions allow.

Thank you very much. :beer: I'm set now.

 

[MichaelD]

Originally posted by: UCJefe
Right in your case, you had anonymous access enabled which means that anybody could connect and they have all the rights of whatever user you put in the box. So in your case, anyone in the world could connect and do whatever Xeon could on your machine. Probably not what you were intending.

Ditto for you. :beer: Thanks!!!!!!

I've used proggys like CuteFTP, etc...but it's been awhile.