Server 2012 allows FTP user to go back to home directory?

[BAD311]

Hello all, I setup a Windows 2012 Server RC1 machine for remote data storage... I bought a program that allows me to connect to an FTP server and upload data to it each night... I finally figured out how to set up FTP on my Windows 2012 server... but when I open up CuteFTP and input my credentials, it successfully logs me in to the folder I assigned the FTP user BUT allows me to go back to the primary/home directory, displaying all of the other folders for other users... What can I do to prevent users from seeing other users folders/files? :-\ Thanks all!!

 

[JoeBleed]

I've never tried this with ftp but it might be as simple as changing the file security rights for the group or user and taking away "list folder contents" on the main/top level directory for the user files.

But seeing the list isn't that unusual. I'd only be worried if they could actually read/access the files.

 

[imagoon]

You need to configure the user, directory and root permissions correctly. You also may need to use IIS based permissions to fully lock down the accounts. Also why are you using RC1? 2012 has been out for years.

 

[razel]

In IIS you must choose to isolate users. It should by default, unless the FTP user you used that went to parent directory is a local admin.