Using User Isolation to isolate users, so I have folder like this


The domain users are able to authenticate, login and see their home directory, but Anonymous users attempt to login as anonymous and then are given the error User cannot log in, home directory inaccessible.


Using Process Monitor, I was able to determine that I'm getting access denied errors. Which makes sense, because domain users have access to the UNC Path via Active Directory, but anonymous will not, and its telling me it is impersonating NT AUTHORITY\IUSR -- how can I setup IIS FTP to impersonate a specific user if the access type is anonymous?

update 2

Is there a way to allow an IUSR account from MachineA to access a share on MachineB?


I ended up adding

<anonymousAuthentication enabled="true" userName="LimitedAccessDomainuser" password="pw" />

to the


file located at



A bit late.. But here goes:

FTP site > FTP Authentication > Anonmynous Authen enabled > Edit... > Set a functional user that has access to the UNC path > domain\user & password on the UNC folder : domain\user & password NTFS security = Read+Write

I checked in production and it worked like this. In IIS current session : Anonmynous.

Happy IIS days!

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.