Iis – FTP User Isolation issues

domainftpiiswindows-server-2008-r2

I have seen plenty of threads on this, but nothing seems quite right.

I have an FTP site setup on Windows Server 2008R2 and I need to allow Domain Users to access their folders only.

I have seen this thread How to isolate ftp users in IIS 7? and do have a domain folder under my root that contains the physical user folders.

When I go to login to the FTP at ftp.example.com, I am presented with the login screen as I should, but then when I enter my test domain username test.user and the password it just refreshes the login window (asking me to login again).

I cannot for the life of me figure out what is going on. I have Isolation set to just the directory and no global virtual directories.

Any help would be greatly appreciated. If you need more information let me know as I am not sure what I am missing.

Thanks!

Best Answer

OK, as far as I can gather you have essentially enabled the use of host header names for FTP.

As far as the server is concerned, it can't tell which of the FTP sites that you have configured that it should authenticate against.

Instead of attempting to log in with test.user try instead with ftp.domain.com|test.user (where ftp.domain.com is the name of the host header you have assigned in the binding for that site).

Essentially the domain name listed before the pipe character tells the FTP service which FTP site to look for authentication credentials.

Make that simple change and let me know how you get on.

-Lewis