Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a Windows 2003 server we migrated from an old (but still active) domain, to a new domain in a new forest. There have been no problems with this machine except for something we noticed recently. Users that access the FTP service on this machine have to provide their OldDomain credentials.

  • There are no local users on the server
  • The FTP folder Sharing is set to Everyone Everything (we share the folder out too)
  • The FTP folder Security has ACL restrictions, namely OldDomain\Domain Users and NewDomain\Domain Users
  • The FTP site is set to allow Anonymous Connections (although when you connect it asks for credentials)
share|improve this question
how did you migrate? is there trust relationship to the old domain? sidhistory? – Nick Kavadias Jul 6 '10 at 16:23
Migration was done using ADMT. There is a full trust. See my answer for an explanation. – Izzy Jul 6 '10 at 16:40
up vote 0 down vote accepted

Figured it out in the end. In all pre-2008 versions of IIS, it seems that the authenticating domain is stored in some arcane location. In order to change this setting, you need to use the ADSUtil command as so:

C:\Inetpub\AdminScripts>adsutil.vbs set msftpsvc/defaultlogondomain "NewDomain.loc"

defaultlogondomain              : (STRING) "NewDomain.loc"
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.