Comments on: How to Setup User Authentication in FTP 7 on IIS 7.0

By: 7bpm

7bpm — Wed, 03 Mar 2010 23:53:20 +0000

How do you go about creating different Usernames and Passwords on the same FTP server that have access to only to specific folders each one?

i.e. the FTP server is http://ftp.7bpm.com and User1 (with Pass1) when is logging in can olny see and access folder c:/intepub/ftproot/user1folder but User2 (with Pass2) can only see and access folder c:/intepub/ftproot/user2folder…

By: sacheson

sacheson — Sun, 28 Feb 2010 04:56:32 +0000

Best writeup yet. Gave me exactly what I needed. Thanks for taking the time to compile an accurate and thorough walk through.

By: Wingson Thijsen

Wingson Thijsen — Thu, 24 Dec 2009 15:11:03 +0000

Hi,

Can anyone tell me if this is also possible with active directory accounts and NTFS security?

Thanks!

By: Helen Mooc

Helen Mooc — Tue, 01 Dec 2009 21:15:05 +0000

I forgot to mention that I setup the ftp folder on a d:\download and I ran this in the terminal:

C:\Userss\Administrator>ICACLS D:\download /grant “NETWORK SERVICE”:M /T
processed file: D:\download
Successfully processes 1 files; Failed processing 0 files

By: Helen Mooc

Helen Mooc — Tue, 01 Dec 2009 20:56:06 +0000

I get this error after following thru these steps. Am able to bring up the ftp site and log in but this comes up:

550 The system can not find the file specified.

Anyone can have an insight on this?

By: Jack Saltiel

Jack Saltiel — Thu, 05 Nov 2009 18:23:31 +0000

Running WS 2008 x64.
I get up through step 16 and all is fine. I set up C:\FTP as my FTP directory, or the root of my ftp directories. I set up a user, did everything else.
In step 17, when I expand “Sites” all I see is a Default Web Site. There is no WindowsFTPuser.com listed.
What did I miss??

By: Jason

Jason — Mon, 26 Oct 2009 19:47:32 +0000

I ran:

ICACLS F:\ /grant “NETWORK SERVICE”:M /T

and it seemed to recurse though all the files:

it outputed:

Successfully processed 5292 files; Failed processing 0 files

But still get a 530 error when I try to connect

Response: 220 Microsoft FTP Service
Command: USER jason
Response: 331 Password required for jason.
Command: PASS *****
Response: 530 User cannot log in.

By: Jason

Jason — Mon, 26 Oct 2009 19:39:02 +0000

I used the following, but it gives me a error on the last command:

C:\Users\Administrator>ICACLS “%SystemDrive%\Windows\System32\inetsrv\config” /grant “NETWORK SERVICE”:R
processed file: C:\Windows\System32\inetsrv\config
Successfully processed 1 files; Failed processing 0 files

C:\Users\Administrator>ICACLS “%SystemDrive%\Windows\System32\inetsrv\config\administration.config” /grant “NETWORK SERVICE”:R
processed file: C:\Windows\System32\inetsrv\config\administration.config
Successfully processed 1 files; Failed processing 0 files

C:\Users\Administrator>ICACLS “%SystemDrive%\Windows\System32\inetsrv\config\redirection.config” /grant “NETWORK SERVICE”:R
processed file: C:\Windows\System32\inetsrv\config\redirection.config
Successfully processed 1 files; Failed processing 0 files

C:\Users\Administrator>ICACLS “F:\” /grant “NETWORK SERVICE”:(M,W)
Invalid parameter “SERVICE:(M,W)”

I’m think the space in the phase NETWORK SERVICE is the problem, but I put quotes around it. Any takers?

Note: I’m on Windows Server 2008 and I have F:\ setup just for web and ftp site

By: Haraken

Haraken — Sat, 15 Aug 2009 11:27:23 +0000

I used these commands instead of the CACLS posted above and they worked perfectly.

ICACLS “%SystemDrive%\Windows\System32\inetsrv\config” /grant “Network Service”:R
ICACLS “%SystemDrive%\Windows\System32\inetsrv\config\administration.config” /grant “Network Service”:R
ICACLS “%SystemDrive%\Windows\System32\inetsrv\config\redirection.config” /grant “Network Service”:R
ICACLS “%SystemDrive%\inetpub\ftproot” /grant “Network Service”:(M,W)

By: khautinh

khautinh — Tue, 14 Jul 2009 20:29:46 +0000

Can anyone help me how to set a domain\user1 account for anonymous authentication please?
I was be able to do that for IIS6 but not IIS7. whenever I entered the domain\user1 and pw, it said the pw is invalid….
Thanks a lot

By: Donny

Donny — Mon, 11 May 2009 11:51:43 +0000

heh, this blog automatically messes up the quotes. When pasting CACLS commands into command promt replace the quotes manually.

By: Donny

Donny — Mon, 11 May 2009 11:50:15 +0000

Oh come on guys… shame on you :) in command promt you should use quotes such as these ” instead of the quotes used in the article: “ and ”

Replace those and everything will work just fine.

By: Tino Mclaren

Tino Mclaren — Sun, 26 Apr 2009 16:37:00 +0000

Great Article :-)

I run into the issue with CACLS and the fix (for me) was simply making sure you have spaces before any backslash options and I replaced %system drive% with c:

So I ended up with

CACLS c:\Windows\System32\inetsrv\config\redirection.config /G “Network Service”:R /E

MAKING SURE THERES A SPACE BETWEEN THE ‘R’ and ‘/E’

Hope this might help someone out

Tino (an old DOS hand at heart)

By: Adam

Adam — Mon, 06 Apr 2009 05:40:10 +0000

I too followed all the steps, but recieved a “550 No such host is known” when trying to connected. Any help would be appreciated. Thanks, Adam

By: David Stubblefield

David Stubblefield — Tue, 10 Mar 2009 19:55:36 +0000

Great Article!

I’m testing this out on a Windows Server 2008 box and found I couldn’t run the calcs command portion, got the following. I ended up just using the GUI to apply speacial permissions but wanted to see if there was another way to use the command line with ICALCS.

C:\>CACLS “%SystemDrive%\Windows\System32\inetsrv\config\administration.config”
/G “Network Service”:R /E
Invalid arguments.
NOTE: Cacls is now deprecated, please use Icacls.

Thanks,
-Dave

By: Phil

Phil — Tue, 24 Feb 2009 11:18:26 +0000

I forgot one…

ICACLS C:\inetpub\privateftp /grant NETZWERKDIENST:M /T

I suggest you replace NETZWERKDIENST with “Network Service”, again =)

Happy ftping!

By: Phil

Phil — Tue, 24 Feb 2009 11:10:58 +0000

Hey guys!

It works for me this way:

ICACLS C:\Windows\System32\inetsrv\config /grant NETZWERKDIENST:R

ICACLS C:\Windows\System32\inetsrv\config\administration.config /grant NETZWERKDIENST:R

ICACLS C:\Windows\System32\inetsrv\config\redirection.config /grant NETZWERKDIENST:R

I suggest you replace NETZWERKDIENST with “Network Service” because I’m from Austria ;)

greetings

By: Go_zilla

Go_zilla — Mon, 19 Jan 2009 20:41:19 +0000

How can we type the following commands with Icalcs?
Because CALCS is not working anymore

CACLS “%SystemDrive%\Windows\System32\inetsrv\config” /G “Network Service”:R /E

CACLS “%SystemDrive%\Windows\System32\inetsrv\config\administration.config” /G “Network Service”:R /E

CACLS “%SystemDrive%\Windows\System32\inetsrv\config\redirection.config” /G “Network Service”:R /E

CACLS “%SystemDrive%\inetpub\privateftp” /G “Network Service”:C /T /E

any help wil be highly appreciated

By: forte

forte — Mon, 15 Dec 2008 07:55:06 +0000

everything worked, except when I try to access the ftp site, the directory cannot be listed and I get a timeout.

when I try testing the connection from ISS I get this

cannot verify access to path

“The server is configured to use pass-through authentication with a built-in account to access the specified physical path. However, IIS Manager cannot verify whether the built-in account has access. Make sure that the application pool identity has Read access to the physical path. If this server is joined to a domain, and the application pool identity is NetworkService or LocalSystem, verify that \$ has Read access to the physical path. Then test these settings again. ”

Please any help would be greatly appreciated.

By: Trystan

Trystan — Wed, 05 Nov 2008 20:41:07 +0000

OK I retract that

I missed the download links in your other article first scan through!!

Thank you