Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Using User Isolation to isolate users, so I have folder like this


The domain users are able to authenticate, login and see their home directory, but Anonymous users attempt to login as anonymous and then are given the error User cannot log in, home directory inaccessible.


Using Process Monitor, I was able to determine that I'm getting access denied errors. Which makes sense, because domain users have access to the UNC Path via Active Directory, but anonymous will not, and its telling me it is impersonating NT AUTHORITY\IUSR -- how can I setup IIS FTP to impersonate a specific user if the access type is anonymous?

update 2

Is there a way to allow an IUSR account from MachineA to access a share on MachineB?

share|improve this question
up vote 0 down vote accepted

I ended up adding

<anonymousAuthentication enabled="true" userName="LimitedAccessDomainuser" password="pw" />

to the


file located at


share|improve this answer

A bit late.. But here goes:

FTP site > FTP Authentication > Anonmynous Authen enabled > Edit... > Set a functional user that has access to the UNC path > domain\user & password on the UNC folder : domain\user & password NTFS security = Read+Write

I checked in production and it worked like this. In IIS current session : Anonmynous.

Happy IIS days!

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.