Windows IIS FTP server advanced configuration

mentioned FTP server, you may think of Serv-U, vs-FTP and other software, in fact, Microsoft's built-in FTP service in IIS is enough, do not believe please look down.

Implementing management for multiple users

First, you need to cancel "Site Properties/Allow anonymous connections", as shown in Figure 1.

Then go to "Computer Management /Local Users and Groups", create a new group, here is established as FTPuser, then create a new user FTP01, then modify the properties of FTP01, add it FTPuser group, remove the default users group. Create folders FTP01 and FTP02 under NTFS format partition (here for d drive), and then set security permissions, as shown in Figure 2.

The same set of FTP02 permissions for the FTP02 full control, of course, you can assign different permissions for different users according to the actual situation. Go back to the IIS Manager and select an FTP site "New/Virtual Directory/Next". Enter FTP01 at the alias, select "Next", select the FTP01 directory you just created, select "Next", and create a new virtual directory. FTP02, the path points to the FTP02 directory. Note here that the alias and directory name and the user name must be exactly the same.

Test: Here is IP 192.168.0.16 as an example, enter FTP://192.168.0.16, press Enter, prompt to enter the user and password, enter FTP01 and its password, enter smoothly, then enter It can only be the FTP01 virtual directory. You can upload a file and check it on the server to determine which directory it is placed in. Similarly, when you log in with FTP02, you enter the FTP02 directory. Users are restricted to their own directories and cannot enter other people's directories. Security is still guaranteed. If the user needs to be able to change the password by himself, then only when the user is created, the option shown in Figure 3 is not selected.

Tip:
Client to modify the password of the FTP account:
At the command prompt, type:
FTP 192.168.0.16
Enter the username
Enter password
Enter quote "site pswd old password new password"
Advantages of this method: combined with NTFS permissions and disk quotas can achieve multi-user diversified management.
Disadvantages of this method: Since the FTP user password is transmitted on the network in plain text, it is not safe. Unfortunately, the built-in FTP service of IIS does not support SSL, which is not comparable to Serv-U.

Implementing the link function in Serv-U

This is achieved by the path resolution principle, which is a hidden function of MS-FTP. First create a folder in the root directory of the FTP site (here, the d drive), named tools. In the IIS Manager, create a virtual directory under the FTP site, named tools, and the path points to the "tool" under the f drive. table of Contents. Note that the virtual directory name here must match the folder name created under the site root directory.

Login on the client, you can not use FTP01, FTP02 to log in, because they log in directly to the corresponding subdirectory under the root directory of the site, and can not go back to the site root directory, so only Can create another new user, here I created an FTP03 user, log in and found that in addition to the FTP01, FTP02 directory, there are other directories, but the FTP01, FTP02 directory permissions are set in front, so FTP03 can not access them, just Know the existence of these directories. Click on the tools directory and you will find that the "Tools" directory under the f drive of the server is automatically pointed to.

Advantages of this method: The link function is implemented without third-party tools, and is especially useful when multiple drives are available. If you want to link to a complete partition, create a folder in the root of the site with the same name and drive letter.

disadvantage of this method: the need to create additional users, if FTP01 these users want to browse the contents of the other disk will be very difficult.

Automatically update FTP site directory and file list

Windows has a very useful command tree where you can show your talents. If the FTP site root directory is d, we just need to create a batch file with the following contents
tree /f /ad: >d:FTP.txt

Then add a task plan and run it every hour. . It is worth noting that advanced settings must be made after adding a task, as shown in Figure 4.

After setting this up, you can download the FTP.txt file to the local to check if there is any update, so you can save the user a directory and find the update time. Especially when the network speed is slow. To expand this, you can save more user time, or rely on another useful command fc of Windows, write the following batch file FTP update.bat:
tree /f /ad: >d:FTPnew.txt
fc /L d:FTP.txt d:FTPnew.txt >d:FTP update list.txt

Then run once to write FTP.bat, then run an FTP update.bat, this You can check the FTP update list.txt. If there is an update, it will indicate which directory has been updated in the form of ***** at the end of *****. The updated file name is listed, is it not? It’s more complete. Users only need to download the FTP update list.txt to view it first. Of course, the user has already browsed the FTP site. The first time you browse and download FTP.txt, if the FTPnew.txt file should not appear in the site root directory. Underneath, you can also point to other locations when editing commands.

Nowadays, I also see a lot of FTP lists on the forum. Manual maintenance is very troublesome. Just put the FTP update list .txt in a web directory or specifically create a virtual directory to point to the FTP update list.txt directory. , then we can browse this file directly through the browser, because IE browser can directly parse the txt file, so it will not prompt for download. In order to better facilitate the viewer, the FTP update .bat can be supplemented. The complete FTP update.bat content is as follows:
tree /f /ad: >d:FTPnew.txt
fc /L d:FTP .txt d:FTPnew.txt >d:FTP update list.txt
echo update time>> d:FTP update list.txt
date /t >> d:FTP update list.txt
time /t >> d: FTP update list.txt

Then add a scheduled task, execute the batch file every hour, so that the viewer not only sees the updated content, but also Knowing the update time, the next update time can also be calculated by yourself. If you log in to this FTP site frequently, you can also add this address to your favorites. You can also know if the server has an update without logging in to FTP. If you are interested, you can visit http://test.yuanlin.cn/FTP list update.txt to see the effect. Tools

above are involved that comes with Windows, does not use any third-party tools, Windows actually there are many places worth to dig deep.