Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have created a FTP Site inside IIS 7.5 panel. Now I have access to whole site using administrator username and password.

Now, I want to let my friend access a specific folder of that FTP site. (for example, this path: \some\folder\accessible\)

I can't create a whole new FTP Site for this purpose, since it says the port is being used by another website.

How to create an account for my friend to have access to just an specific folder?

P.S: I have read about User Isolation feature of IIS 7.5, but I couldn't find how to create a user just for FTP and set it to a custom path.

share|improve this question

2 Answers 2

up vote 2 down vote accepted

I've finally solved this problem. Here is what I did:

  1. Configure FTP with IIS Manager Authentication (I've pointed my FTP site to empty folder C:\inetpub\ftproot which was empty)

  2. In IIS Control panel, select your FTP Site and then double click on FTP User Isolation.

  3. Select User name directory and click Apply.

  4. Now right click on the FTP Site, click Create new Virtual directory.

  5. Set the alias to the IIS Manager user name that you created in step 1, and set its physical path to everywhere you want that user to have access.

  6. Click OK.

Now that IIS manager user is able to access the folder you wanted via FTP, and he'll not have access to any other place.

Please note that you should repeat steps 1-6 for each user. (Step 1, from CONFIGURE THE IIS MANAGEMENT SERVICE AND ADD AN IIS 7 MANAGER part to the end of that page, then steps 2-6)

share|improve this answer
2  
Future visitors should note that you can accomplish the same thing with a Windows user account and NTFS ACLs as well. –  MDMarra Nov 16 '12 at 16:50

It's all set with windows permissions. Keep in mind if the folder you want is inside a folder you don't want him to have, he will still need a minimum of Read access to the folder containing the destination folder.

I would recommend setting up FileZilla Server, it will give you more control and I think it will help you do what you want to easier. Doesn't require Windows credentials and you can jail (restrict a user's home directory) to wherever you want. Plus you can use symbolic links that appear in their home directory but point elsewhere. Makes it easier to administer than with IIS 7.

share|improve this answer
    
So, let user see (and modify) just a subfolder is not possible in IIS7.5? –  Mahdi Ghiasi Nov 16 '12 at 16:00
    
Not if they don't have at least read rights to the parent folder. If they do, technically you could tell them that they have to configure the path exactly but you're putting a lot of trust that the user a) knows how to do that and b) is trustworthy. –  rsmith84 Nov 16 '12 at 16:09
1  
@rsmith84 you can do all of that with FTP 7.5 services. –  MDMarra Nov 16 '12 at 16:32
    
Learn something new everyday. –  rsmith84 Nov 16 '12 at 16:52

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.