up vote 1 down vote favorite
share [g+] share [fb]

We have a Windows 2003 server we migrated from an old (but still active) domain, to a new domain in a new forest. There have been no problems with this machine except for something we noticed recently. Users that access the FTP service on this machine have to provide their OldDomain credentials.

  • There are no local users on the server
  • The FTP folder Sharing is set to Everyone Everything (we share the folder out too)
  • The FTP folder Security has ACL restrictions, namely OldDomain\Domain Users and NewDomain\Domain Users
  • The FTP site is set to allow Anonymous Connections (although when you connect it asks for credentials)
link|improve this question
how did you migrate? is there trust relationship to the old domain? sidhistory? – Nick Kavadias Jul 6 '10 at 16:23
Migration was done using ADMT. There is a full trust. See my answer for an explanation. – Izzy Jul 6 '10 at 16:40
feedback

1 Answer

up vote 0 down vote accepted

Figured it out in the end. In all pre-2008 versions of IIS, it seems that the authenticating domain is stored in some arcane location. In order to change this setting, you need to use the ADSUtil command as so:

C:\Inetpub\AdminScripts>adsutil.vbs set msftpsvc/defaultlogondomain "NewDomain.loc"

defaultlogondomain              : (STRING) "NewDomain.loc"
link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.