Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need software to manage a large number of groups for a FTP server. Ideally this software should also allow managing the associated NTFS rights for the folders on FTP (if they still match the definition for example, or propagate rights changes to the disk). I do not need a complex and very expensive IT management suite, just a solution for the described problem. Prices up to about 5000$ are ok.

After having searched for some hours on the web, I could neither find an interesting tool to evaluate nor a comparison of existing tools. Given this situation, what are some of the best candidates I can start evaluating?

share|improve this question
If you can't find something, for under $5000, you could probably have someone write a customized program for you. – jftuga Sep 13 '11 at 15:46
In the end if I cannot find anything, I will probably do it myself using the network management API... :-) – jdehaan Sep 13 '11 at 16:02
up vote 7 down vote accepted

Ummm, seems Active Directory would be exactly what you need. Assuming you already own licenses for Windows Server, the cost will be a whopping $0.


After hearing you describe your needs further, what you really need is a filesystem permissions auditing and management system, not really user and group management. It's quite unlikely that you'll find a canned solution that does everything you need. It sounds, though, that you could get the desired functionality with a small set of powershell scripts, possibly called by a simple web front end.

share|improve this answer
Yes, this exactly the type of thing AD is great at. Although it won't be 0 as you would probably have to purchase "AD CALs" but they are like 20$/ea or something silly cheap (minus the count you have from purchasing Windows Server) – Zypher Sep 13 '11 at 15:58
Ahh yes, those pesky CALs. :) – EEAA Sep 13 '11 at 15:59
We actually already have an IT managed LDAP, from which we can take the users, but in our team we focus on managing the rights & groups into which these users can be put. There is no really niche UI to figure out at a glance where a given user belongs to and what folders he is able to access with given rights. On the contrary given a folder on FTP I also have to easy way to figure out which users have access to it.... Can Active Directory really do that? I will check of course, but I was not aware that it could do it. Thanks anywas. – jdehaan Sep 13 '11 at 16:07
Right-click on the folder in question, select "Properties", and check the "Security" tab. The information there is from the NTFS ACLs, and individual ACEs can be local users/groups, AD users/groups, or both. – EEAA Sep 13 '11 at 16:11
ErikA, you are kidding me, do you really mean this is a user friendly way? :-D I will have to check repeatedly and modify + audit these rights quite often, I need software to overview and query it without browsing to each single folder and check the rights manually. We are talking about more than a million files and a few hundreds users and even more groups. – jdehaan Sep 13 '11 at 16:14

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.