Home > Learn > Deploying Web Sites on IIS 7 > Publishing Content to Web Sites > FTP 7 for IIS 7 > Configuring FTP 7.5 User Isolation
Configuring FTP 7.5 User Isolation
Author: Robert McMurray Published on January 15, 2008 by iisteam Updated on March 24, 2010 by iisteam Tags: FTPIntroduction
Microsoft has created a new FTP service that has been completely rewritten for Windows Server 2008. This new FTP service incorporates many new features that enable web authors to publish content better than before, and offers web administrators more security and deployment options. This document will walk you through the various FTP user isolation settings using the new FTP user interfaceand by directly editing the IIS configuration files. Note: This walk-through contains a series of steps where you will be logging in to your FTP site using the local administrator account. These steps should only be followed on the server itself using the loopback address or over SSL from a remote server. If you prefer to use a separate user account instead of the administrator account, you willneed to create the appropriate folders and set the correct permissions for that user account when necessary.
In this walkthrough
• Using the FTP Site Wizard to Create an FTP site (http://learn.iis.net/page.aspx/305/configuring-ftp-userisolation/#001) • Examining the New FTP User Isolation Settings (http://learn.iis.net/page.aspx/305/configuring-ftp-userisolation/#002) • Configuring UserIsolation Settings by Physical Directories (http://learn.iis.net/page.aspx/305/configuringftp-user-isolation/#003) • Configuring User Isolation Settings for All Directories (http://learn.iis.net/page.aspx/305/configuring-ftpuser-isolation/#004)
The following items are required to complete the procedures in this article:
1. IIS 7 must be installed on your Windows Server 2008 RC0server, and the Internet Information Services Manager must be installed. 2. The new FTP service must be installed. You can download and install the FTP service from the http://www.iis.net/ (http://www.iis.net/) web site using one of the following links:
Configuring FTP 7.5 User Isolation : FTP 7 for IIS 7 :Publishing Content to Web Site... Page 2 of 23
• FTP for IIS 7 (x64) (http://go.microsoft.com/fwlink/?LinkID=143197) • FTP for IIS 7 (x86) (http://go.microsoft.com/fwlink/?LinkID=143196) 3. You will need to create a root folder for FTP publishing:
• Create a folder at "%SystemDrive%\inetpub\ftproot" • Set the permissions to allow anonymous access:
• Open a command prompt. • Type the followingcommand: ICACLS "%SystemDrive%\inetpub\ftproot" /Grant IUSR:R /T • Close the command prompt.
4. You will need to create additional content folders:
• Create a folder at "%SystemDrive%\inetpub\ftproot\LocalUser\Public" • Create a folder at "%SystemDrive%\inetpub\adminfiles"
Using the FTP Site Wizard to Create an FTP site
In this first section we will create a new FTP site that can beopened for Read-only access by anonymous users and Read/Write access by the administrator account.
1. In IIS Manager, in the Connections pane, click the Sites node in the tree. 2. As shown in the image below, right-click the Sites node in the tree and click Add FTP Site, or click Add FTP Site in the Actions pane.
21/03/2011Configuring FTP 7.5 User Isolation : FTP 7 for IIS 7 : Publishing Content to Web Site... Page 3 of 23
(/file.axd?i=419) 3. When the Add FTP Site wizard appears:
• Enter "My New FTP Site" in the FTP site name box, then navigate to the "%SystemDrive% \inetpub\ftproot" folder that you created in the Prerequisites section. Note that if you choose to type in the path to your content folder,...