IIS 7 FTP restricted to a folder

Discussion in 'Windows / IIS' started by blueprintpm, Jul 23, 2010.

  1. I want to set up FTP access for a client to my site, but just to a specific folder "ABC" that is under the root directory. I have created a user "testuser". I have assigned that username to the "ABC" directory. I cannot get connected to it. I have implemented SSL on the site as well (and am new to that AND to IIS 7).

    When trying to connect in IE, it just keeps prompting for the user name/password. When trying to connect via SmartFTP, it just hangs.

    Any suggestions on how to tell my user to connect to this folder via FTP?
    Thanks much -
     
  2. Bruce

    Bruce DiscountASP.NET Staff

    can you post FTP log?
     
  3. Bruce: thanks but it's working now!? Probably user error :) I'm good to go.
     
  4. Ok, sorry, am kind of a newbie to FTP. I want to have my FTP users JUSt log into their folder that I've created off of the root directory, I don't want them to automatically see the root directory. How do they log in? Is there any way to keep them from seeing the root (I know I have to give them read access in IIS 7)?
     
  5. Hi,
    Yes you can do that, I've done it on DASP servers and the users that login to the folder you allow them only see it and the sub-directories it contains, it will appear to be the root to them.
    http://support.discountasp.net/KB/a167/permission-manager.aspx

    If you need help with that repost.
    All the best,
    Mark
     
  6. when I deny them 'read' to the root, they can't log in at all. My understanding is that in IIS 7, there's a problem with that - you have to give them at least 'read' to the root.
     
  7. mjp

    mjp

    Yes, they have to have root permission or the subdirectory access will fail. You can still drop them into the destination directory, and as Wisemx said, it looks like root to the user.
     
  8. Ok, again I'm a newbie, how do you 'drop' them there? Anyone looking at the path could figure out they could look at the root if they wanted to, no?
     
  9. ...It will appear a bit confusing but with the FTP login they are only allowed what you grant them.
    With HTTP they can get to the root yes, but from the FTP login you provide, not unless you allow them to the root.
    All the best,
    Mark
     
  10. Ok, great, thanks! I will try that.
     
  11. My simple solution

    1. create a standard user
    2. create "New ftp site" under IIS7 (don't use the standard one!)
    3. When it asks for parameters, enter the physical folder you want to bind, then the name of users that can access it, finally a new IP address
    4. Change permissions on the selected folder to allow the user to read/write into it

    No need of "User isolation"! (I was getting mad!)

    :D

    Hope it helps!
     
  12. Great tip! Thanks so much
     

Share This Page