Networking Forums

Networking Forums > Computer Networking > Windows Networking > IIS FTP With Active Directory, Access Problembs have occoured!

Reply
Thread Tools Display Modes

IIS FTP With Active Directory, Access Problembs have occoured!

 
 
Kinglsey Jarrett
Guest
Posts: n/a

 
      04-11-2005, 04:20 PM
I have a FTP site running on Port 21 on Win Server 03. The Ftp server is
set up with AD isolation. users files are stored in B:\FTPROOT\<USER> .
For example, user Philip has his ftproot set to b:\FTPROOT and FTPdir
set to Philip which gives the path B:\FTPROOT\Philip . This folder
exists and contains file "Test.txt", 4kb. Security settings for the
folder are:

Allow:

Everyone | Read
Philip | Full Control
Administrators | Full Control
SYSTEM | Full Control

Deny:

(None)

Philip is the owner of the folder. Notice that CREATOR OWNER does not
appear on the list, If you give CREATOR OWNER full control then in the
advanced permissions dialouge it shows up as Full Control but in the
simple one it shows as special permissions only. Thinking that this was
causing the error I removed CREATOR OWNER but this changed nothing.

When trying to upload anything to the folder you get error 550 and it
fails, I know 550 is Access Denied but user Philip has full access and
there is no deny security options set.

Any idea of what is going wrong?

Thanks

Kingsley Jarrett

(Please excuse poor spelling and punctuation)
 
Reply With Quote
 
 
 
 
=?Utf-8?B?WmVyMGJ5dGU=?=
Guest
Posts: n/a

 
      04-12-2005, 06:59 AM
What about the IIS default permissions? the anonymous access through ftp? is
there any autintication for this access?

This link will help you to reconfigure the IIS permissions for FTP folders:
http://support.microsoft.com/default...b;en-us;310723

The special permissions includes the creator owner for documents, so it wont
appear in the simple DACL , it will appear when you view the advanced DACL.



"Kinglsey Jarrett" wrote:

> I have a FTP site running on Port 21 on Win Server 03. The Ftp server is
> set up with AD isolation. users files are stored in B:\FTPROOT\<USER> .
> For example, user Philip has his ftproot set to b:\FTPROOT and FTPdir
> set to Philip which gives the path B:\FTPROOT\Philip . This folder
> exists and contains file "Test.txt", 4kb. Security settings for the
> folder are:
>
> Allow:
>
> Everyone | Read
> Philip | Full Control
> Administrators | Full Control
> SYSTEM | Full Control
>
> Deny:
>
> (None)
>
> Philip is the owner of the folder. Notice that CREATOR OWNER does not
> appear on the list, If you give CREATOR OWNER full control then in the
> advanced permissions dialouge it shows up as Full Control but in the
> simple one it shows as special permissions only. Thinking that this was
> causing the error I removed CREATOR OWNER but this changed nothing.
>
> When trying to upload anything to the folder you get error 550 and it
> fails, I know 550 is Access Denied but user Philip has full access and
> there is no deny security options set.
>
> Any idea of what is going wrong?
>
> Thanks
>
> Kingsley Jarrett
>
> (Please excuse poor spelling and punctuation)
>

 
Reply With Quote
 
Kinglsey Jarrett
Guest
Posts: n/a

 
      04-12-2005, 06:45 PM
There is no option to disable anon access because I have set it up using
AD Authentication. The only options are "FTP Site", "Messages" and
"Directory Security" which only contains TCP/IP Access restrictions (All
computers will be granted access)


Zer0byte wrote:
> What about the IIS default permissions? the anonymous access through ftp? is
> there any autintication for this access?
>
> This link will help you to reconfigure the IIS permissions for FTP folders:
> http://support.microsoft.com/default...b;en-us;310723
>
> The special permissions includes the creator owner for documents, so it wont
> appear in the simple DACL , it will appear when you view the advanced DACL.
>
>
>
> "Kinglsey Jarrett" wrote:
>
>
>>I have a FTP site running on Port 21 on Win Server 03. The Ftp server is
>>set up with AD isolation. users files are stored in B:\FTPROOT\<USER> .
>>For example, user Philip has his ftproot set to b:\FTPROOT and FTPdir
>>set to Philip which gives the path B:\FTPROOT\Philip . This folder
>>exists and contains file "Test.txt", 4kb. Security settings for the
>>folder are:
>>
>>Allow:
>>
>>Everyone | Read
>>Philip | Full Control
>>Administrators | Full Control
>>SYSTEM | Full Control
>>
>>Deny:
>>
>>(None)
>>
>>Philip is the owner of the folder. Notice that CREATOR OWNER does not
>>appear on the list, If you give CREATOR OWNER full control then in the
>>advanced permissions dialouge it shows up as Full Control but in the
>>simple one it shows as special permissions only. Thinking that this was
>>causing the error I removed CREATOR OWNER but this changed nothing.
>>
>>When trying to upload anything to the folder you get error 550 and it
>>fails, I know 550 is Access Denied but user Philip has full access and
>>there is no deny security options set.
>>
>>Any idea of what is going wrong?
>>
>>Thanks
>>
>>Kingsley Jarrett
>>
>>(Please excuse poor spelling and punctuation)
>>

 
Reply With Quote
 
=?Utf-8?B?WmVyMGJ5dGU=?=
Guest
Posts: n/a

 
      04-13-2005, 05:55 AM
So you have to review the NTFS , folders and files permissions.

"Kinglsey Jarrett" wrote:

> There is no option to disable anon access because I have set it up using
> AD Authentication. The only options are "FTP Site", "Messages" and
> "Directory Security" which only contains TCP/IP Access restrictions (All
> computers will be granted access)
>
>
> Zer0byte wrote:
> > What about the IIS default permissions? the anonymous access through ftp? is
> > there any autintication for this access?
> >
> > This link will help you to reconfigure the IIS permissions for FTP folders:
> > http://support.microsoft.com/default...b;en-us;310723
> >
> > The special permissions includes the creator owner for documents, so it wont
> > appear in the simple DACL , it will appear when you view the advanced DACL.
> >
> >
> >
> > "Kinglsey Jarrett" wrote:
> >
> >
> >>I have a FTP site running on Port 21 on Win Server 03. The Ftp server is
> >>set up with AD isolation. users files are stored in B:\FTPROOT\<USER> .
> >>For example, user Philip has his ftproot set to b:\FTPROOT and FTPdir
> >>set to Philip which gives the path B:\FTPROOT\Philip . This folder
> >>exists and contains file "Test.txt", 4kb. Security settings for the
> >>folder are:
> >>
> >>Allow:
> >>
> >>Everyone | Read
> >>Philip | Full Control
> >>Administrators | Full Control
> >>SYSTEM | Full Control
> >>
> >>Deny:
> >>
> >>(None)
> >>
> >>Philip is the owner of the folder. Notice that CREATOR OWNER does not
> >>appear on the list, If you give CREATOR OWNER full control then in the
> >>advanced permissions dialouge it shows up as Full Control but in the
> >>simple one it shows as special permissions only. Thinking that this was
> >>causing the error I removed CREATOR OWNER but this changed nothing.
> >>
> >>When trying to upload anything to the folder you get error 550 and it
> >>fails, I know 550 is Access Denied but user Philip has full access and
> >>there is no deny security options set.
> >>
> >>Any idea of what is going wrong?
> >>
> >>Thanks
> >>
> >>Kingsley Jarrett
> >>
> >>(Please excuse poor spelling and punctuation)
> >>

>

 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Active Directory Sub-net Patrick Whittle Windows Networking 2 10-11-2009 07:45 AM
Users on Server 2003 / Active Directory Can Not Access Shared Folders martinenglish@ascentive.com Windows Networking 1 10-15-2007 05:15 PM
eap-tls without active directory liolemaire@gmail.com Wireless Internet 2 11-26-2006 07:26 AM
Unable to access Windows 2003 file server in a Windows 2003/XP Active Directory Domain Edward Ray Windows Networking 0 11-21-2003 03:03 AM
Cannot log into active directory paul Windows Networking 0 08-20-2003 09:32 AM



1 2 3 4 5 6 7 8 9 10 11