Use IIS6 to isolate users through FTP.

Using IIS6 to isolate users through FTP

 

The user isolation function of FTP service in IIS is a new function of Windows Server 2003. Each user can have a dedicated folder. When a user logs on, the folder to which the user belongs will be imported and cannot be switched to another user's folder.

When creating an FTP site, you must determine whether to enable the "FTP isolation" function. IIS allows three modes:

• Do not isolate users:When a user connects to this type of FTP, the user will be directed directly to the same folder, that is, the home directory of the entire FTP.
• Isolate users:You must create a folder with the same user name for each user. The folder will be directly imported when the user logs on.

  Localuser \ User Name

  Localuser \ public: the folder imported by the USER anonymous logon using the anonymous account.

  Domain Name (NetBIOS Name) \ User Name

• Use Active DirectoryIsolate users:The user must be a domain user account.

• Create an FTP home directory (E: \ ftproot in this example ).
• Two users in the domain: user1 and user2.

  To isolate users using Active Directory, you must use a Reversible Password. If you use an irreversible password, you must reset it.

• Create a master folder for the two users in the FTP home directory.

• Set the user's main directory in the Active Directory database.

In the active directory database, two attributes are used to support user isolation: ftproot (value: FTP root directory) and ftpdir (value: User's FTP main directory ).

 

Run the following command to check whether the setting is successful.

• Create a user (ftpuser in this example) that can read the user attribute field for IIS ).

  Create a common user and assign the "read all user information" permission to the user.

• Create a site "isolate users with Active Directory" in IIS.
• Create a folder named after the user name (in E: \ ftproot) in L1 (local domain group) of the organization unit testou under example. zqin.

  'Create a folder (in E: \ ftproot) named by the user in L1 (local domain group) of the organization unit testou under example. zqin. Set the FTP folder (E: \ ftproot) attribute in IIS.

 

 

 

For more technical documents, see:
Windows Server 2003/2008	Http://blog.csdn.net/onlyzhangqin/category/312865.aspx
Windows XP/Vista	Http://blog.csdn.net/onlyzhangqin/category/312866.aspx
Exchange 2000/2003/2007	Http://blog.csdn.net/onlyzhangqin/category/312870.aspx
ISA Server 2004/2006	Http://blog.csdn.net/onlyzhangqin/category/312871.aspx
SQL Server 2000/2005/2008	Http://blog.csdn.net/onlyzhangqin/category/312868.aspx
SUS/SMS/MOSS/Mom	Http://blog.csdn.net/onlyzhangqin/category/314800.aspx
Office 2003/2007	Http://blog.csdn.net/onlyzhangqin/category/313829.aspx