I have a customer who wants me to get a SFTP server. I am using an Filezilla server for normal FTP and I am currently trying to make a SFTP server by using FreeSSHd on a win2003 enterprise server.
I have tested the SSH connection with Filezilla and WinSCP clients and both of them can connect to the SFTP server using the key that is generated + name and password.
The problem at this moment is that if the customer decides to use Putty and uses the key + name and pass he can get into the root of the server seeing other documents which he shouldnt be allowed to see.
So the question is:
How can I limit the rights of the customer if he or she decides to connect through a SSH-client. This so I can prevent customers from seeing documents from each other.