| | |
How to hide FTP root folder from FTP Users
![]() |
•
•
Join Date: Feb 2008
Posts: 21
Reputation:
Solved Threads: 0
Dear Friend,
I setup FTP server for my company they are using Win 2003 server. I created multi user accounts. In internet explorer or explored window through I can access the particular department folder only (what i logined). But if I going to firefox or some other FTP client softwares like filezilla, it showing all the folders in root directory. How can we hide root folder there like IE FTP?
I will try to explain you the which way I applied.
1. Created a FTP Users Group.
2. Created a Folder as Root and given the security for Administrator(Full control), IUSER_machine(read) and FTP Users (Read) and IWAM account (Read)
3. In FTP site, I disabled the anonyms connection.
4.in home directory pointed the root folder and checked all read,write,log checkbox
for each user
1. Created local account and noxpiring pwd
2. I made it to FTP User Group
3. I created a folder inside root
3. I checked the FTP User have any right there. it not.
4. I given new user account modify permission to that folder.
But working good with IE FTP browsing . thirdparty ftp client software have only pblm.
pls help me
I setup FTP server for my company they are using Win 2003 server. I created multi user accounts. In internet explorer or explored window through I can access the particular department folder only (what i logined). But if I going to firefox or some other FTP client softwares like filezilla, it showing all the folders in root directory. How can we hide root folder there like IE FTP?
I will try to explain you the which way I applied.
1. Created a FTP Users Group.
2. Created a Folder as Root and given the security for Administrator(Full control), IUSER_machine(read) and FTP Users (Read) and IWAM account (Read)
3. In FTP site, I disabled the anonyms connection.
4.in home directory pointed the root folder and checked all read,write,log checkbox
for each user
1. Created local account and noxpiring pwd
2. I made it to FTP User Group
3. I created a folder inside root
3. I checked the FTP User have any right there. it not.
4. I given new user account modify permission to that folder.
But working good with IE FTP browsing . thirdparty ftp client software have only pblm.
pls help me
•
•
Join Date: May 2005
Posts: 514
Reputation:
Solved Threads: 19
From what your describing it sounds like you want Isolation mode:
http://technet.microsoft.com/en-us/l.../cc753285.aspx
http://technet.microsoft.com/en-us/l.../cc753285.aspx
•
•
Join Date: Feb 2008
Posts: 21
Reputation:
Solved Threads: 0
thanks alot for your kind reply.
I didnt gone for isolation mode. I got this procedure from net and i applied as like that
Creating a Multi-user FTP site with IIS
In our webhosting business, we have many customers who require FTP access to their files. Our need then, is to create a single FTP site that allows many different customers the ability to manage their web content, keep other FTP users out, and be easy for us to manage. This is the process we use:
1. Create a local 'FTP Users' group
2. Grant that group the right (found within the local security policy) to Log On Locally.
3. Create a folder on a data drive, which must be formatted with NTFS. This will become the root of your new FTP site. (Your web content should always be on a drive without any executable or OS code on it. This prevents directory traversal flaws from affecting you.)
4. On that folder, break inheritance (Properties | Security | Advanced.) Remove the existing permissions.
5. Add these account permissions back to the folder:
1. Administrators (full control)
2. IUSR_machine (read) and
3. FTP Users (Read)
4. You may need to add the IWAM account with the same permissions as the IUSR account, depending on whether you're using multiple app pools or not.
6. Set the FTP users right to apply to this folder only.
7. Install the FTP service (Control Panel | Add/Remove Programs | Application Server | Internet Information Server | FTP Service)
8. In the properties of the new Default FTP site, go to the Security Accounts tab and disable anonymous connections.
9. On the Home Directory tab, point the default FTP sites' home directory at the folder you've created. Make sure that the Read, Write, and Log visits check boxes are all checked.
10. The Messages tab has four boxes; the Banner message is displayed prior to authentication and is the place for any sort of security message. The Welcome box can contain any usage notes or instructions to users.
At this point, we have the server prepared for use; now we have to set up a user:
1. For each customer, create a local user account.
2. Set the account to have a non-expiring password and clear the Must Change Password box.
3. Make them a member of the FTP users group.
4. Create a folder under the FTP home directory, with this folder name identical to the username that will use it. It can inherit rights from the parent folder.
5. Double check to make sure the FTP Users group doesn't have any rights within the folder. If it does, inheritance isn't correctly set up for that group on the parent folder.
6. Take the user account you've created and give it Modify rights on their folder and all subfolders.
Some admins use Windows Quotas to ensure that the drive isn't filled, either intentionally or unintentionally. To test the setup, log into the ftp site with the new username and password. A failure to log in could be one of these things:
1. The password is set to change on next login,
2. The user isn't a member of the FTP Users group
3. The permissions on "their" folder aren't right.
You should also confirm that you can both upload a file and then delete it.
If i put the ftp address it asking the login. once i login with hr dept login id it showing only nthat folder. if i am using firefox or some other ftp client software it showing from the root directory.
pls help me. it is urgent
I didnt gone for isolation mode. I got this procedure from net and i applied as like that
Creating a Multi-user FTP site with IIS
In our webhosting business, we have many customers who require FTP access to their files. Our need then, is to create a single FTP site that allows many different customers the ability to manage their web content, keep other FTP users out, and be easy for us to manage. This is the process we use:
1. Create a local 'FTP Users' group
2. Grant that group the right (found within the local security policy) to Log On Locally.
3. Create a folder on a data drive, which must be formatted with NTFS. This will become the root of your new FTP site. (Your web content should always be on a drive without any executable or OS code on it. This prevents directory traversal flaws from affecting you.)
4. On that folder, break inheritance (Properties | Security | Advanced.) Remove the existing permissions.
5. Add these account permissions back to the folder:
1. Administrators (full control)
2. IUSR_machine (read) and
3. FTP Users (Read)
4. You may need to add the IWAM account with the same permissions as the IUSR account, depending on whether you're using multiple app pools or not.
6. Set the FTP users right to apply to this folder only.
7. Install the FTP service (Control Panel | Add/Remove Programs | Application Server | Internet Information Server | FTP Service)
8. In the properties of the new Default FTP site, go to the Security Accounts tab and disable anonymous connections.
9. On the Home Directory tab, point the default FTP sites' home directory at the folder you've created. Make sure that the Read, Write, and Log visits check boxes are all checked.
10. The Messages tab has four boxes; the Banner message is displayed prior to authentication and is the place for any sort of security message. The Welcome box can contain any usage notes or instructions to users.
At this point, we have the server prepared for use; now we have to set up a user:
1. For each customer, create a local user account.
2. Set the account to have a non-expiring password and clear the Must Change Password box.
3. Make them a member of the FTP users group.
4. Create a folder under the FTP home directory, with this folder name identical to the username that will use it. It can inherit rights from the parent folder.
5. Double check to make sure the FTP Users group doesn't have any rights within the folder. If it does, inheritance isn't correctly set up for that group on the parent folder.
6. Take the user account you've created and give it Modify rights on their folder and all subfolders.
Some admins use Windows Quotas to ensure that the drive isn't filled, either intentionally or unintentionally. To test the setup, log into the ftp site with the new username and password. A failure to log in could be one of these things:
1. The password is set to change on next login,
2. The user isn't a member of the FTP Users group
3. The permissions on "their" folder aren't right.
You should also confirm that you can both upload a file and then delete it.
If i put the ftp address it asking the login. once i login with hr dept login id it showing only nthat folder. if i am using firefox or some other ftp client software it showing from the root directory.
pls help me. it is urgent
found this on ms website..
don't know if it might be of help to your prob..
http://support.microsoft.com/kb/245048 'hide ftp directories
don't know if it might be of help to your prob..
http://support.microsoft.com/kb/245048 'hide ftp directories
![]() |
Similar Threads
- Internet explorer Redirecting (Viruses, Spyware and other Nasties)
- explorer.exe uses 99% CPU (Viruses, Spyware and other Nasties)
Other Threads in the Windows NT / 2000 / XP Forum
- Previous Thread: Error Message: Please Re install Performance Centre
- Next Thread: Chrome EULA
| Thread Tools | Search this Thread |
.net 3.5 3daccelertion 64bit 2010 a.exe activedirectory address alaris android application black blue bsod bulletin canonical chinese chkdsk codeplex collaboration combofix computerfreezes cursor deployments desktop domain drive dual eartlink error explorer fax fonts framework freeze gadgets hardware home intel internet laptop laptops latitude lcd linux mac markshuttleworth memory microsoft minimalizes mobile monitor motionle1600 netbooks opensource operatingsystems options oracle osinstallationproblem outlook palm partition port printer program proxy raid rds reformat remotedesktop remotedesktopconnection retail retrieve screen security server. sharepoint sitetositevpn slowperformance sp1 sp3 spyware studios technology ubuntu uninstall update upgrade videodrivers virtual virus vpn webos weecam window windows windows7 windowsxp xp xpde






