We'd like to set up an IIS 7 FTP server with non-Windows user accounts. We've heard that FTP Server v7.5 supports this, but the documentation is talking about "IIS Manager Accounts" and implies that these accounts have the ability to configure sites and applications. We want low-privilege accounts that only have the ability to read and write files in their home directories. Is there a way to accomplish this?
IIS 7 introduces IIS Manager accounts which can be used for a number of things, including FTP.
Note that once you grant them IIS Manager Permissions, they will be able to manage their site using IIS Manager, as long as you also turn on the Management Service (WMSvc) at the top level.
Additionally, you can then grant that user access to FTP.
Here are the key steps:
- create a user at the top level, under IIS Manager Users
- give the "Local Service" user read/write access to the site, or change the Web Management Service (WMSvc) service to a custom account and use that instead. The account that the WMSvc service runs under is what needs to have read/write access to disk when using IIS Manager user.
- grant that user access to the site or application, under IIS Manager Permissions
- in FTP Authentication on the site, make sure to add the IisManagerAuth custom provider
- in FTP Authorization, make sure to grant that user access
Everything else is the same as you would setup a Windows user for FTP.
Please note that the IIS Manager Users and IIS Manager Permissions icons are not installed in IIS by default. If you don't see them in the IIS Manager console, you can add them by enabling the Management Service Role Service in IIS.
To do this, launch Server Manager and in the left pane, highlight Web Server (IIS) which is located under Roles (assuming you have IIS already installed). On the right pane, scroll down about halfway until you see the Add Role Services link on the far right. Click it. The Add Role Services dialog appears.
Put a check mark next to Management Service, located under the Management Tools tree. Press Install, and voila!
Here's a graphical representation of what I just wrote: http://learn.iis.net/page.aspx/321/configure-ftp-with-iis-7-manager-authentication/#02
In FTP 7.5, you can create non-active directory accounts for use in ftp.
Open IIS Manager, click on the item under start page (it is the name of the machine), then look for Managment section (very bottom). Click on IIS Manager User, add any user for ftp here.
You also need to do one more thing click on Management Services and click on Windows credentials or IIS manager credentials. That's it.