12.25. Configuring FTP Authentication

Problem

You want to authenticate users before they can access content on your FTP server.

Solution

Using a graphical user interface

  1. Open Internet Information Services (IIS) Manager.

  2. In the left pane, expand the console tree and select the FTP Sites node.

  3. Right-click on your FTP site and select Properties.

  4. Select the Security Accounts tab.

  5. To allow anonymous users access to your FTP site, select Allow anonymous connections.

  6. To force users to supply credentials to access your FTP site, deselect Allow anonymous connections.

Using VBScript

' This enables anonymous-only access to a web site
' and configures the default user account and password.
' ------ SCRIPT CONFIGURATION ------
strComputer = "<ServerName>"
strSiteID = "<SiteID>"
' ------ END CONFIGURATION ---------
set objFtpSite = GetObject("IIS://" & strComputer & "/MSFTPSVC/" & strSiteID)
   
objFtpSite.AllowAnonymous    = True
objFtpSite.AnonymousOnly     = True
objFtpSite.AnonymousUserName = "DOMAIN\iisuser"
objFtpSite.AnonymousUserPass = "!!sUser"
objFtpSite.SetInfo
   
WScript.Echo "Successfully modified Anonymous settings for: " & _
             objFtpSite.ServerComment

Discussion

If anonymous connections are disabled, users are authenticated to your site using Basic Authentication. In this situation, the user is prompted for the credentials of his Windows user account. When the user enters his credentials and clicks OK, the user's password will be appended to the URL and transmitted in clear text across the network, which ...

Get Windows Server Cookbook now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.