I am "experimenting" with Microsoft Internet Information Services 7.5, on a Windows 7 OS, as an FTP site.

I have created a FTP-site, called "Opta-site", and, enabled "Anonymous Authentication", "Basic Authentication", "IisManagerAuth" and "AspNetAuth".

FTP User Isolation is not enabled (i.e., all users go straight to ftproot).

I have then tried connecting anonymously, and, it works.

Then, I created one IIS user (User name: "Opta", Password "ThePassword"), using, what I believe is, the Microsoft .Net API(?), using the following commands, in Power Shell


[Microsoft.Web.Management.Server.ManagementAuthentication]::CreateUser("Opta", "ThePassword") 

[Microsoft.Web.Management.Server.ManagementAuthorization]::Grant("Opta", "Opta-site", $FALSE) 

And, back in the IIS Manager UI, enabled an "Allow Rule", for User "Opta", to have read and write permissions at the ftp root.

Now, when I connect, using, e.g., filezilla, or, windows ftp, I get:

Status: Connecting to
Status: Connection established, waiting for welcome message...
Response:   220 Microsoft FTP Service
Command:    USER Opta
Response:   331 Password required for Opta.
Command:    PASS ***********
Response:   530-User cannot log in.
Response:    Win32 error:   Access is denied. 
Response:    Error details: Filename: \\?\C:\Windows\system32\inetsrv\config\redirection.config
Response:    Error: Cannot read configuration file due to insufficient permissions
Response:   530 End
Error:     Critical error
Error:     Could not connect to server

Is this a windows issue (i.e., set windows permissions, on that file "C:\Windows\system32\inetsrv\config\redirection.config")? Or, something else?

I have seen other people have this/similar issue, e.g, Serverfault question A, Serverfault question B, StackOverflow question, the last of which suggests to give "IIS_IUSRS" permissions on the file, but none of these "solutions" have worked, in this case. The issue remains, unchanged.

Thanks for all help :)


Does the account you're attempting to connect with have permissions to/defined in the FTP root/necessary folders?

  • Well, in the IIS Manager UI, I have clicked the node "Opta-site" (the ftp-site), and, under FTP Authorization Rules, added an Allow Rule, for User Opta to have read/write access. So, from the IIS side, that should be ok? In Windows, the ftproot folder has permissions set for both IUSR, and IIS_IUSRS, allthoug, I'm not positive, on whether that is actually necessary...
    – ChrisC
    Sep 11 '13 at 21:40
  • 1
    Have you tried these configurations directions yet? iis.net/learn/install/installing-publishing-technologies/…
    – Techie Joe
    Sep 11 '13 at 23:31
  • 4
    Aha! This: iis.net/learn/publish/using-the-ftp-service/… Specifically, these permissions: ICACLS "%SystemDrive%\Windows\System32\inetsrv\config" /Grant "Network Service":R /T ICACLS "%SystemDrive%\Windows\System32\inetsrv\config\administration.config" /Grant "Network Service":R ICACLS "%SystemDrive%\Windows\System32\inetsrv\config\redirection.config" /Grant "Network Service":R worked! Awesome, for pointing in that direction, TechieJoe! Thanks! Appreciate it!! Happy :)
    – ChrisC
    Sep 12 '13 at 0:37

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.