Iis – How toIS FTP 7.5 User accounts work

ftpiisiis-7.5windows-server-2008

We'd like to set up an IIS 7 FTP server with non-Windows user accounts. We've heard that FTP Server v7.5 supports this, but the documentation is talking about "IIS Manager Accounts" and implies that these accounts have the ability to configure sites and applications. We want low-privilege accounts that only have the ability to read and write files in their home directories. Is there a way to accomplish this?

Best Answer

IIS 7 introduces IIS Manager accounts which can be used for a number of things, including FTP.

Note that once you grant them IIS Manager Permissions, they will be able to manage their site using IIS Manager, as long as you also turn on the Management Service (WMSvc) at the top level.

Additionally, you can then grant that user access to FTP.

Here are the key steps:

  • create a user at the top level, under IIS Manager Users
  • give the "Local Service" user read/write access to the site, or change the Web Management Service (WMSvc) service to a custom account and use that instead. The account that the WMSvc service runs under is what needs to have read/write access to disk when using IIS Manager user.
  • grant that user access to the site or application, under IIS Manager Permissions
  • in FTP Authentication on the site, make sure to add the IisManagerAuth custom provider
  • in FTP Authorization, make sure to grant that user access

Everything else is the same as you would setup a Windows user for FTP.

Related Topic