Chris Crowe's Blog
Ramblings of an IIS MVP ( MVP Since 1997 )

Powered By IIS 7

Search my blog

Some of my readers



My Microsoft Certifications
Dec 15, 1998
Dec 20, 2000
Jan 31, 2001
Jul 22, 2002
Nov 1, 2004

My Microsoft MVP Awards


1997
1998
1999
2000
2001
2002
2003
2004
2005
2006
mvp.support.microsoft.com

<< FTP User Editor for Microsoft Active Directory (Updated) | Home

FTP User Account Editor for Active Directory 

FTP User Editor for Microsoft Active Directory.....

What is this?

When you run the FTP server with Microsoft IIS 6.0 on the Windows 2003 Server Family of products you can have the FTP server isolate users to their own folders. This means that the user can not browse into another users folder.

There are three isolation modes:

  1. Do not isolate users
  2. Isolate Users
  3. Isolate Users with Active Directory

This application is designed for option 3 and allows you to edit two attributes for a users account:

  • msIIS-FTPRoot
  • msIIS-FTPDir

For more details on these attributes see the following page.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adschema/adschema/a_msiis_ftproot.asp

There is no Windows UI to perform this step but there is a way to edit these attributes using the IISFTP.vbs script that is installed when you install IIS with the FTP Service in IIS 6.

The IISFTP.vbs script works fine but sometimes it is nicer and simpler to have a UI to help perform these steps. You also can see potential problems easier with a Windows UI.

The Application

This application has been written to in c# and requires the .NET Framework 2.0 (the new framework) to function. Windows 2003 Server Family by default installs the .NET Framework 1.1.

The .NET Framework 2.0 redistributable can be downloaded from this page and is approx 22MB

http://www.microsoft.com/downloads/details.aspx?FamilyID=0856EACB-4362-4B0D-8EDD-AAB15C5E04F5&displaylang=en

You can then download and install this application from the URL below.

http://blog.crowe.co.nz/Attachments/FTPUserEditor/setup.msi

After you install the program a new item will be added to your Start - Programs folder called IIS Tools.

When you run the application it will prompt you for a Windows Active Directory domain to log onto. You can log on with the currently logged on user account or you can specify another account to log on with.

Once you log on you are then shown a tree of Folders and Organizational Units (OUs). Click on a node will display all user accounts in that folder or OU.

You can select one or more users and right click and select Edit which will bring up the User Editor dialog.

This dialog allows you to set or clear the attributes that are required for users to log on to the FTP server.

If you have any comments on this application ( or bug reports ) please let me know at iismvp2005@iisfaq.homeip.net

Cheers

Chris Crowe [ IIS MVP 1997 -> 2006 ]
http://www.microsoft.com/windows2000/community/mvp/bios/crowe.mspx

Additional references

Hosting Multiple FTP Sites with FTP User Isolation (IIS 6.0)
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/b63de8ef-e3c5-456d-a8ca-7af4198819d4.mspx

posted on Wednesday, February 15, 2006 2:16 AM | Filed Under [ FTP User Editor IIS IIS / FTP IIS / Tools / Administration ]

Comments


# re: FTP User Account Editor for Active Directory

Gravatar
Thanks you so much for this little program, it has helped me a lot as I am now able to create these isolated ftp accounts at work with ease rather than having to go through the hassle of doing the changes in so many different places.
Thanks again, Mamun
Posted by Mamun Ahmed on 4/11/2008 9:03 PM

# re: FTP User Account Editor for Active Directory


Awesome Tool! This tool really helps a lot to configure all FTP configurations!

Thanks
[]'s
Posted by Felipe Perez on 4/15/2008 4:44 AM

# FTP User Account Editor for Active Directory


Perfect tool, worked great when first installed, but now does not see new user accounts created in AD. Has a windows update broken this tool?
Posted by LT - MCSE on 6/10/2008 2:49 AM

# re: FTP User Account Editor for Active Directory

Gravatar
re AD Integrated FTP, firstly this is a nice utility to have, secondly is it possible to pull authentication details from a secondary domain the FTP servers domain has a trust with.
Posted by Dawid on 6/18/2008 8:28 PM

# re: FTP User Account Editor for Active Directory


Great little utility... Thx!
Posted by JRE on 6/20/2008 12:28 PM

# re: FTP User Account Editor for Active Directory


Thanks for the very useful tool; and shame on microsoft for not providing anything for that purpose.
Posted by Frank Saga on 8/13/2008 12:47 PM

# re: FTP User Account Editor for Active Directory

Gravatar
Looks like a fantastic tool! I have downloaded and tested but ran into some small issues. Do you offer support for your product also?

Thanks!

-Mark
Posted by Mark on 9/16/2008 3:59 AM

# re: FTP User Account Editor for Active Directory

Gravatar
I tried this tool on a win2k8 box and at first it worked perfectly. Then all of a sudden it stoped working. Now I can not get to isolate the users at all. No matter who logs in to my ftp goes to the Root directory of the FTP site. I have tried to uninstall/reinstall to no avail. I bounced the box a few time to see if this would kick it off and no change. Am I missing something here? Although everything seemed to be straight forward.
Posted by Julio Sarmiento on 10/11/2008 1:29 AM

# re: FTP User Account Editor for Active Directory

Gravatar
It will not working for me if know please help me
Posted by Syed on 12/26/2008 5:06 PM

# re: FTP User Account Editor for Active Directory

Gravatar
It will not working form me if know means please send details to above mentioned email id
its very helpful for me

Thanks & Regards
syed
Posted by Syed on 12/26/2008 5:09 PM

# re: FTP User Account Editor for Active Directory

Gravatar
ya this my email id
syed@techconet.co.in
this is my mobile number 9865226786
Posted by Syed on 12/26/2008 5:10 PM

# re: FTP User Account Editor for Active Directory


FANTASTIC.

I needed to set the FTPDir and FTPRoot for approx. 250 users in 5 different OUs. Each group had different settings that I needed.

I searched and searched and couldn;t find any help. Then I stumbled on yor little utility. It ook me less than 5 minutes to download, install, and set the values for all 250 users.

THANK YOU, THANK YOU, THANK YOU, THANK YOU, THANK YOU!
Posted by David on 6/3/2009 8:39 AM

# multiple FTPDir values for a user


I am not clear about the proper way to allow a user FTP access, such that he sees 2 folders under FTPRoot. I was using a batch script of iisftp /setAdProp commands to set FTPRoot and FTPDir values, but i have never added 2 directories for anyone...its always one directory and that's where user's land up. I can't allow user access to FTPRoot, but just 2 folders underneath that...not one...not all.

How can I achieve this?

Posted by Diabolic Preacher on 6/29/2009 4:50 PM

# re: multiple FTPDir values for a user


@ Diabolic Preacher

Maybe you could use virtual directories?
Posted by Mikko on 8/19/2009 6:49 PM

# re: FTP User Account Editor for Active Directory

Gravatar
Excellent tool, i got the solution through script but this is much easier to do.

Thanks chris for your help! Really appreciate it.
Posted by Tariq on 9/9/2009 10:21 AM

# re: FTP User Account Editor for Active Directory


Great timesaving tool, thanks!
Posted by Sean on 9/10/2009 12:58 AM

# re: FTP User Account Editor for Active Directory

Gravatar
DUDE, If you have a paypal account I will donate. Great little tool with big benefits
Posted by Nate on 9/11/2009 1:11 PM

# re: FTP User Account Editor for Active Directory

Gravatar
Hi,

I installed this program, but unable to configure. I attached the user home directory as FTP root, but while I accessing the ftp server (ftp://servername/) it shows the default C:\inetpub/ftproot folder. So How I can access the user folder through FTP
Thanks Pradeep
Posted by Pradeep on 9/14/2009 9:02 PM

# re: FTP User Account Editor for Active Directory

Gravatar
Could you tell me step by step configuration FTP Server with multi (base on active directory user account) user and multi folder.
For Example:
User1 can access Folder1
User2 can access Folder2
User3 can access Folder3

User1 can access Folder1 and Folder3
User2 can access Folder2 and Folder3
User3 can access Folder1, Folder2 and Folder3

Thx b4
Posted by Afriadi on 10/10/2009 4:03 AM

# re: FTP User Account Editor for Active Directory

Gravatar
Afriadi,

I'm trying to do the same thing that you are trying, so far I have found no luck, I'm going to look into virtual directories now to see if this is possible using virtual directories.

CL
Posted by Charles Landsky on 10/21/2009 10:58 AM

# re: FTP User Account Editor for Active Directory

Gravatar
Does this work with Windows server 2008. Please reply ASAP. Many Thanks
Posted by Mohammed on 11/7/2009 8:04 AM

Post Comment


Title *
Name *
Email
Url
Comment *  
Please add 7 and 2 and type the answer here:
Copyright © 2005 - 2099 Chris Crowe