Introduction

Microsoft has updated the FTP service for Windows Server® 2008 and above.

This document takes you through creating FTP sites using the new FTP user interface and by directly editing the IIS configuration files. It contains:

• Creating a New FTP Site Using the IIS Manager
• Creating a New FTP Site by Editing the IIS Configuration Files

Prerequisites

The following items are required to complete the procedures in this article:

1. IIS/Internet Information Services Manager must be installed on your Windows 2008

2. The new FTP service must be installed. You can download and install the FTP service from the https://www.iis.net/ Web site using one of the following links:

• FTP 7.5 for IIS 7 (x64)
• FTP 7.5 for IIS 7 (x86)

3. You must create a root folder for FTP publishing

The following steps are required to setup FTP using IIS Manager:

1. Create a windows instance

2. Log into the instance

3. Create user from Computer Management

Creating a New FTP Site Using IIS Manager

Create a new FTP site named ‘MainFTP’ and pointed it to c:\inetpub\ftproot. I also selected All Unassigned for the IP Address and No SSL for simplicity. Select Basic as the Authentication method and Allow access to Specific users. You have to enter one user to be able to proceed. Setup my local user account for this walk-through. Enabled both Read and Write permissions. Once the site has been created, click on the Main FTP entry under Sites to open the Features View and double click on FTP User Isolation.

Creating a New FTP User

Create four users: ‘user1’, ‘user2’, ‘user3’, and ‘user4’.

user1, user2, and user3 will only have access to a specific directory within c:\inetpub. User4 will have access to all folders within c:\inetpub. To begin with, create a virtual directory named ‘LocalUser’ which is pointed to this directory c:\inetpub\ftproot. To do this, right click on Main FTP and choose Add Virtual Directory. The alias must be LocalUser for the user isolation to work correctly. Right click on the Local User virtual directory and select Add Virtual Directory. The alias has to exactly match the local windows user that you created. For user1, the alias is user1 and the Physical path is c:\inetpub\user1. Now click OK to create the virtual directory.

Repeat this process for user2, user3, and user4 setting each to the specific directory they should have access to in the physical path.

Now need to grant our users authorization to their respective directories. Click on user1 in the folder list and double click on FTP Authorization Rules in the feature window. It will be seen that your original user is granted Allow and Read, Write permissions. This was automatically configured when the FTP site was set up. Click on Add Allow Rule…

Select Specific users and enter user1. Check Read and Write in the Permissions as shown below. Click OK to add the Allow Rule.

Now local user and user1 that can access the c:\inetpub\user1 folder via FTP.

Repeat this for the remaining 3 user folders assigning the specific user access to the folder. Use Filezilla to connect to my FTP server as user1. The screenshot is given below. The user only has access to the folder assigned in the user1 virtual directory and is unable to traverse up to a higher level to see other data on the server.

4. Connect through Filezilla (username|ftpuser)