We are excited to announce that the IIS.NET Forums are moving to the new Microsoft Q&A experience. Learn more >

FTP write/delete not workingRSS

5 replies

Last post Mar 23, 2021 01:13 PM by smith_ja

  • FTP write/delete not working

    Mar 16, 2021 04:01 PM|smith_ja|LINK

    I have a Windows 2016 server with IIS 10.  
    I am having problems setting up the NTFP permissions to allow FTP write/delete to my Users' virtual web folders.  My users have write problems when they are using any FTP client (FileZilla, etc).  

    Here are the settings I have tried in IIS and on the server folders.

    IIS Server>FTP Authentication - Anonymous Authentication=Disabled, Basic Authentication=Disabled
    IIS Server>FTP Authorization Rules=None
       Site>FTP Authentication - Anonymous Authentication=Disabled, Basic Authentication=Enabled
       Site>FTP Authorization Rules=Allow All Users
       Site>FTP User Isolation=Do not isolate user. Start users in FTP root directory
          Virtual Web Folder>FTP Authorization Rules=Allow All Users

    NTFS Permissions - With these permissions my FTP Users can List all folders and files, but they cannot write or delete.
    C:\InetPub
      Creater Owner=Special, System=Full, Administrators=Full, Users=(read, list, execute, special)
    C:\InetPub\wwwroot
      Creater Owner=Special, System=Full, Administrators=Full, Users=(read, list, execute), 
      Internet Guest Account=(read, list, execute), Network Service=(read, list, execute)
    C:\InetPub\wwwroot\UserFolder
      Creater Owner=Special, System=Full, Administrators=Full, Users=(read, list, execute), 
      Internet Guest Account=(read, list, execute), Network Service=(read, list, execute), Network=(read, list, execute), Interactive=list
      Domain\User=Full Control

    If I add Modify permissions to the Users Group on the C:\InetPub\wwwroot\UserFolder, my users can (read, write, list, and delete).  The problem is that they can also modify other UserFolders.

  • Re: FTP write/delete not working

    Mar 17, 2021 01:56 AM|samwu|LINK

    Hi smith_ja,

    smith_ja

    Here are the settings I have tried in IIS and on the server folders.

    IIS Server>FTP Authentication - Anonymous Authentication=Disabled, Basic Authentication=Disabled
    IIS Server>FTP Authorization Rules=None
       Site>FTP Authentication - Anonymous Authentication=Disabled, Basic Authentication=Enabled
       Site>FTP Authorization Rules=Allow All Users
       Site>FTP User Isolation=Do not isolate user. Start users in FTP root directory
          Virtual Web Folder>FTP Authorization Rules=Allow All Users

    NTFS Permissions - With these permissions my FTP Users can List all folders and files, but they cannot write or delete.

    Please make sure that the write/delete permissions for whatever user/group had to exist in the Authentication rules at the Default site level.

    Best regards,

    Sam

    IIS.NET forums are moving to a new home on Microsoft Q&A, we encourage you to go to Microsoft Q&A for .NET for posting new questions and get involved today. Learn more >
  • Re: FTP write/delete not working

    Mar 17, 2021 06:24 PM|smith_ja|LINK

    These are the settings for the default web site.  I added FTP Publishing to this site.
       Default Site>FTP Authentication - Anonymous Authentication=Disabled, Basic Authentication=Enabled
       Default Site>FTP Authorization Rules=Allow All Users
       Default Site>Basic Settings>Physical Path>C:\InetPub\wwwroot>Connect As=Domain\iusr_cluster

    Currently all authenticated Domain Users can Modify all files and folders in the Default Site.  This is bad.  I want only Administrators to be able to Modify all files and folders.  I want authenticated Domain Users to be restricted to only be able to Modify Files in their assigned folders.

    Here are my current NTFS settings.  Please tell me how to fix this.

    C:\InetPub\wwwroot
    System=Full, Network Service=(read,list,execute), Administrators=Full, Users=(read,list,execute), Domain\iusr_cluster=(read,list,execute)

    C:\InetPub\wwwroot\UserFolder1
    Inherit these NTFS folder settings from Parent ... System=Full, Network Service=(read,list,execute), Administrators=Full, Users=(read,list,execute), Domain\iusr_cluster=(read,list,execute)
    Add this NTFS folder setting ... Domain\User1

    C:\InetPub\wwwroot\UserFolder2
    Inherit these NTFS folder settings from Parent ... System=Full, Network Service=(read,list,execute), Administrators=Full, Users=(read,list,execute), Domain\iusr_cluster=(read,list,execute)
    Add this NTFS folder setting ... Domain\User2

  • Re: FTP write/delete not working

    Mar 19, 2021 05:22 AM|samwu|LINK

    Hi smith_ja,

    smith_ja

    Here are my current NTFS settings.  Please tell me how to fix this.

    Again, please make sure that the write/delete permissions for whatever user/group had to exist in the Authentication rules at the Default site level.

    Best regards,

    Sam

    IIS.NET forums are moving to a new home on Microsoft Q&A, we encourage you to go to Microsoft Q&A for .NET for posting new questions and get involved today. Learn more >
  • Re: FTP write/delete not working

    Mar 19, 2021 12:42 PM|smith_ja|LINK

    I'm not quite sure what you are trying to tell me.  Here are my authentication rules for the default web site

    Authentication=Enabled

       Default Site>Anonymous, Basic, and Windows Authentication are all Enabled
       Default Site>FTP Authorization Rules=Allow All Users
       Default Site>Basic Settings>Physical Path>C:\InetPub\wwwroot>Connect As=Domain\iusr_cluster

  • Re: FTP write/delete not working

    Mar 23, 2021 01:13 PM|smith_ja|LINK

    I found the answer to my problem.  I had to set the ftp connect as to pass through authentication.  I then gave server\users read access to all folders and folder owners modify access to their assigned folders.