Is it possible to setup win2k or 2003 FTP server so that
it does not allow backing out of there home directory?
Example: A user FTPs to my ftp site he is in his assigned
home, but can cd .. out to see other folders he can't read
them but can list them all does anyone know what I should
be doing to avoid this? I setup an FTP site then create
virtuals with user IDs, is this an incorrect way to use
Microsoft FTP? Thank You al for your Time On This.

[ Post a follow-up to this message ]

On Thu, 18 Mar 2004 06:16:43 -0800, "Richie"
<anonymous@discussions.microsoft.com> wrote:

>Is it possible to setup win2k or 2003 FTP server so that
>it does not allow backing out of there home directory?
>Example: A user FTPs to my ftp site he is in his assigned
>home, but can cd .. out to see other folders he can't read
>them but can list them all does anyone know what I should
>be doing to avoid this? I setup an FTP site then create
>virtuals with user IDs, is this an incorrect way to use
>Microsoft FTP? Thank You al for your Time On This.

Richie,

Yes this can be achieved in both IIS5 and IIS6.

In IIS5 you had to 'tweak' things a little to get it to work, but it
can be done. See this earlier post for an explanation :

http://groups.google.com/groups?hl=...404ax.com#link3

The good news is that this functionality is now built in to IIS6 :

http://www.microsoft.com/resources/...ftp_isolate.asp

URLS may have wrapped.


Regards,

Paul Lynch
MCSE

[ Post a follow-up to this message ]