Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a customer who wants me to get a SFTP server. I am using an Filezilla server for normal FTP and I am currently trying to make a SFTP server by using FreeSSHd on a win2003 enterprise server.

I have tested the SSH connection with Filezilla and WinSCP clients and both of them can connect to the SFTP server using the key that is generated + name and password.

The problem at this moment is that if the customer decides to use Putty and uses the key + name and pass he can get into the root of the server seeing other documents which he shouldnt be allowed to see.

So the question is:

How can I limit the rights of the customer if he or she decides to connect through a SSH-client. This so I can prevent customers from seeing documents from each other.

share|improve this question

Chroot is not an option on a MSWindows box, but you can restrict access using the standard NTFS permissions ACLs. Failing that you could just export the directory as a fileshare and mount it on a dedicated box running the SFTP server.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.