Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I set up a new virtual directory in IIS under the Default FTP Site. I already have other virtual directories, and I'm able to access them with my user account, which is a domain admin. I created an account named FTPuser, gave it full permissions to the virtual directory, but I can't open the site. When I log in, I get a Success Audit event in Event Viewer, so my account is being authenticated. But the site doesn't appear, I just get the login box again.

I ran Process Monitor and saw different behavior between the two login scenarios. When I login to the same FTP site with my admin account, I get a SUCCESS result in Procmon when trying to access the folder that is specified as the home directory for my Default Web Site. But I get an ACCESS DENIED message when trying to connect as the FTPuser. Above that in the log, it also shows a NO SUCH DEVICE error trying to connect to the IPC$ share on that drive (the one containing the home directory).

When I look at the permissions, both accounts seem to have Full Control on the relevant directories. Can anyone point me in the right direction as to what is going on here?


share|improve this question
Read your first paragraph again-- it doesn't make sense. You're talking about a virtual directory under the "Default Web Site", but your question talks about FTP. Which is it-- an FTP or a web site? Do you have an FTP site that just happens to refer to the same physical directories that a web site also refers to? – Evan Anderson Jun 30 '10 at 18:38
That was a typo; I meant Default FTP Site. – johnnyb10 Jun 30 '10 at 18:51
up vote 0 down vote accepted

What is the User Isolation configured for your Default FTP Site. You can refer the article Hosting Multiple FTP Sites with FTP User Isolation (IIS 6.0) and Isolating FTP Users (IIS 6.0)


If you already have an FTP site and you don't know the isolation mode for it you can open the metabase.xml file from C:\windows\system32\inetsrv and search for the tag UserIsolationMode and check its value.

FTP site having mode as:

Do not isolate users (this is same as the only mode available in IIS 5.0) ---------> will have UserIsolationMode set to 0

Isolate users (this is applicable for local as well as domain users) -----------> will have UserIsolationMode set to 1

Isolate users using Active Directory (also called Active directory user isolation mode, applicable only for Active directory users) -----> will have UserIsolationMode set to 2

Read more:

share|improve this answer
How do I figure that out? The article talks about setting up isolation mode, but it doesn't say how to check which isolation mode is being used? We have a Default FTP site, and then a bunch of virtual directories below it that act as separate FTP sites. – johnnyb10 Jul 1 '10 at 20:35
Please check the edit. – Vivek Kumbhar Jul 2 '10 at 4:46

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.