I am using Windows Server 2008 Standard with the downloadable version of IIS7.5. My problem is Domain Users are not able to login to my FTP server. I have followed all posts that I could find for help but still no resolution. All admins are able to login.
If I add a user to the Domain Admins group in Active Directory, then that user is able to login. Then if I take that user back out of the Domain Admins group, the user is then not able to login.
I used the process monitor to see what is happening in the background when a normal domain user tries to login. The only error I saw was ACCESS DENIED, but I do not know what access was denied. The path is correct as the same user can login if added to the
Domain Admins group.
Enable auditing and see what user is being denied. If you are using process monitor, then add the username column inside process monitor to see what user is being denied.
After I turned on auditing on the root of the volume holding the user's directories, I noticed that the FTP service was accessing the default administration share for the drive. The FTP server is on my IIS server and User files are on my Data Protection
server and I had set the root path of the FTP server to a UNC on the Data Protection server that included the u$ share name. I created a new share, changed the FTP site's root path and all is working fine now.
CyberIT
2 Posts
530 User cannot log in, home directory inaccessible
Nov 14, 2009 12:46 PM|LINK
Hi All. Thanks in advance for your help.
I am using Windows Server 2008 Standard with the downloadable version of IIS7.5. My problem is Domain Users are not able to login to my FTP server. I have followed all posts that I could find for help but still no resolution. All admins are able to login.
If I add a user to the Domain Admins group in Active Directory, then that user is able to login. Then if I take that user back out of the Domain Admins group, the user is then not able to login.
I used the process monitor to see what is happening in the background when a normal domain user tries to login. The only error I saw was ACCESS DENIED, but I do not know what access was denied. The path is correct as the same user can login if added to the Domain Admins group.
Any suggestions?
Thank you.
steve schofi...
5681 Posts
MVP
Moderator
Re: 530 User cannot log in, home directory inaccessible
Nov 14, 2009 07:04 PM|LINK
Enable auditing and see what user is being denied. If you are using process monitor, then add the username column inside process monitor to see what user is being denied.
http://weblogs.asp.net/steveschofield/archive/2008/03/07/detecting-permission-issues-using-auditing-and-process-monitor.aspx
Steve Schofield
Windows Server MVP - IIS
http://iislogs.com/steveschofield
http://www.IISLogs.com
Log archival solution
Install, Configure, Forget
CyberIT
2 Posts
Re: 530 User cannot log in, home directory inaccessible
Nov 14, 2009 08:00 PM|LINK
Thank you for the information.
After I turned on auditing on the root of the volume holding the user's directories, I noticed that the FTP service was accessing the default administration share for the drive. The FTP server is on my IIS server and User files are on my Data Protection server and I had set the root path of the FTP server to a UNC on the Data Protection server that included the u$ share name. I created a new share, changed the FTP site's root path and all is working fine now.
Simple mistake that I should have known better.
Again, thanks for your help.
steve schofi...
5681 Posts
MVP
Moderator
Re: 530 User cannot log in, home directory inaccessible
Nov 14, 2009 08:09 PM|LINK
Steve Schofield
Windows Server MVP - IIS
http://iislogs.com/steveschofield
http://www.IISLogs.com
Log archival solution
Install, Configure, Forget