How can I set up FTP for an isolated user in IIS 6.0?

How can I set up FTP for an isolated user in IIS 6.0? Currently, everyone can FTP to the Web site in the FTProot folder with read and write permission. I'd like to set up an FTP account for an authenticated user to upload files requiring an ID and password. I want to give him permission to only access that folder in the local machine where the FTProot folder exists.
The step-by-step instructions would be quite lengthy, so I'll provide only high-level instructions:

  1. Install IIS 6.0, including the FTP component. Ensure FTP is set to start automatically.
  2. Create a user account with a password by using the Computer Management console. Place the computer in the Guests group, and remove it from the Users group.
  3. Use Explorer to grant the new account change permissions to your FTP Root folder
  4. Use the Internet Services Manager to configure FTP to allow authenticated users and not allow anonymous users.

Remember that FTP passwords can be sniffed because they're not transferred using encryption. They're a whole mess of other security considerations, so please do read up on IIS security issues: http://www.microsoft.com/technet/security/prodtech/iis/

This was first published in January 2004

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.
    Back to top