Create a Secure FTP Directory that Uses Password Authentication

ID: Q239120


The information in this article applies to:
  • Microsoft Internet Information Server version 4.0


SUMMARY

In order for you to create a means for clients to upload to their Web site content directory through File Transfer Protocol (FTP), and provide a means to authenticate these users, use the following steps.

  1. Create a FTP user either at the domain or local level using User Manager (for example, "Bob").


  2. Grant Log on Locally right to this new FTP user (or an associated group).


  3. Create directory on a NTFS file system (NTFS) partition. This directory will contain all the files and folders accessible to the user.


  4. Create a virtual directory in the FTP site using the Microsoft Management Console (MMC). Use the MMC, right-click the Default FTP Site, select New, select Virtual Directory, and then follow the steps through the wizard. If you wish the user to be placed in their own "root" directory, name the virtual directory the same as that of the user account (for example, "Bob").

    NOTE: The directory name is case-sensitive. If you are creating the virtual directory for uploading files, you will need to also enable the "Write" permission on the "Virtual Directory" tab.


  5. Grant NTFS permissions (through Windows NT Explorer) on the folder for the Administrators (Full Control) and the user of the folder. Granting Administrators control to this folder is optional. The user should have the minimum permission that allows them to perform the requested action (Add/Read or Change).


  6. Make sure that "Allow only anonymous connections" is NOT selected under the "Security Accounts" tab for the FTP site. This will allow the user to log into that Virtual Directory using Clear Text Authentication. When that user logs in to the FTP site, the virtual directory that is set up will be their root directory. Only that user will have rights to the directory.



MORE INFORMATION

Similar steps may be used for making an existing directory FTP accessible.

For additional information, please click the article number(s) below to view the article(s) in the Microsoft Knowledge Base:

Q142853 Virtual Directories Not Visible on FTP Clients
Q172138 How to Create a Virtual Directory
Q185874 How to Troubleshoot Permissions In Internet Information Server 4.0

Additional query words: FTP VIRTUAL DIRECTORY

Keywords :
Version : winnt:4.0
Platform : winnt
Issue type : kbhowto


Last Reviewed: August 27, 1999
© 2000 Microsoft Corporation. All rights reserved. Terms of Use.