Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a windows server 2003 with IIS(6). This is setup as our ftp server. We have the directory security setup to reject all ips except ones listed below. We have another server with ip, which is on the list for accepted ips. Yet the ftp server will not accept any incoming connections from this server. Thank you in advance for helping.

share|improve this question

Couple of questions to help troubleshoot.

1) Can you ping the FTP server from the other server? 2) Have you attempted to telnet to port 21 from the second server to the FTP server? If so, what is the result? 3) If you turn off directory security temporarily does that allow you to contact the FTP server? 4) Are you running Windows Firewall (Routing and Remote Access)? 5) Are there any errors in the Event Log?

share|improve this answer
I can ping the server. THe error in the event log is FTP server could not create a client worker thread for user at host The connection to this user is terminated. The data is the error – george9170 Aug 26 '09 at 13:32
telnet server 21. results in rejected connection unrecognized ip. If i turn off directory security by setting granted acces, will it remove all ips in the list? This ftp server hosts 15 other clients this one seems not to be able to get through. So i assume that the firewall should be fine. – george9170 Aug 26 '09 at 13:38
Ok, if it is working for other servers then it probably isn't a firewall issue, and I don't suggest opening up the directory security because it might in fact delete the list. Have you looked at…? – Catherine MacInnes Aug 26 '09 at 14:22
up vote 1 down vote accepted

Restarting iis admin service forced a restart of ftp publishing service. But it didn't bring the ftp publishing service back up. Bringing it backup fixed my problem.

Apparently whenever you modify the IP accept list you need to restart IIS. Thank you everyone for your help

share|improve this answer
Instead of restarting the IISAdmin service (which will leave FTP, Web, etc. stopped), you could use the iisreset command, which will stop all IIS processes and then restore all services and sites to their former state when the command was issued. – Jessica McKinnon Aug 26 '09 at 14:50

This has one possible fix. Here's a knowledge base article that may help.

Either of them work?

share|improve this answer
it seems that >cscript adsutil.vbs enum msftpsvc/1/root shows my metabase is wrong. Being a lowly programmer I am not sure deleting the entire metabase is the solution. If i delete the metabase will i lose the entire list of accepted ip address? – george9170 Aug 26 '09 at 13:47
+1 I would upvote you but i dont have 15 rep sorry – george9170 Aug 26 '09 at 13:48
@george9170: that's okay :-) The metabase question, I don't know if it will or not. You might want to make sure you have the list handy in case they have to be re-entered. – Bart Silverstrim Aug 26 '09 at 14:03
restarting iis seems not to have any effect. – george9170 Aug 26 '09 at 14:10

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.