Home / server / Questions / 128348
In Process
RSolberg
Asked: 2010-04-01 21:02:11 +0800 CST

IIS7 Windows Server 2008 FTP -> Response: 530 User cannot log in

  • 772

I just launched my first IIS FTP site following many of the tutorials from IIS.NET... I'm using IIS Users and Permissions rather than anonymous and/or basic.

This is what I'm seeing while trying to establish the connection...

Status:    Resolving address of ftp.mydomain.com 
Status:    Connecting to ###.###.##.###:21... 
Status:    Connection established, waiting for welcome message... 
Response:  220 Microsoft FTP Service  
Command:   USER MyFTPUser  
Response:  331 Password required for MyFTPUser. 
Command:   PASS ********************  
Response:  530 User cannot log in. 
Error:     Critical error 
Error:     Could not connect to server
windows-server-2008 ftp iis-7

7 Answers

  1. It's quite old but I found myself in the same situation. I solved giving the right permission to the "Network services" on some configurafiles:

    CACLS “%SystemDrive%\Windows\System32\inetsrv\config” /G “Network Service”:R /E
CACLS “%SystemDrive%\Windows\System32\inetsrv\config\administration.config” /G “Network Service”:R /E
CACLS “%SystemDrive%\Windows\System32\inetsrv\config\redirection.config” /G “Network Service”:R /E

    Hope it helps.

    • 4

  2. On Windows Server 2008 you must now use these commands:

    ICACLS "%SystemDrive%\Windows\System32\inetsrv\config" /Grant "Network Service":R /T

ICACLS "%SystemDrive%\Windows\System32\inetsrv\config\administration.config" /Grant "Network Service":R

ICACLS "%SystemDrive%\Windows\System32\inetsrv\config\redirection.config" /Grant "Network Service":R
    • 3

  3. in my situation, I was missing Role Service FTP extensibility, which is actually allows IIS Manager Auth. This is pretty tricky, as you could allow IIS Manager auth, but still it would not work until you have not installed FTP Extensibility

    • 2

  4. This worked for me on Windows Server 2012

    ICACLS "C:\Windows\System32\inetsrv\config" /Grant *S-1-5-20:R /T
ICACLS "C:\Windows\System32\inetsrv\config\administration.config" /Grant *S-1-5-20:R
ICACLS "C:\Windows\System32\inetsrv\config\redirection.config" /Grant *S-1-5-20:R
    • 1

  5. Looks like you are not able to connect to the server. The issue is not related to password. I am not sure what you mean when you said "

    using IIS Users and Permissions rather than anonymous and/or basic

    You will need to implement some authentication either Anonymous or Basic. Follow this article and you should be good.

    • 0

  6. In my case, I created two user acccounts FTPUser and FTPAdmin in my local Windows machine. Actually when I created the same users in IIS it didn't work. But you've to create local Windows users using user accounts.

    • 0

  7. From: http://support.microsoft.com/kb/200475

    This problem occurs when one of the following scenarios is true:

    • The Allow only anonymous connections security setting has been turned on in the Microsoft Management Console (MMC).

    • The username does not have the Log on locally permission in User Manager.

    • The username does not have the Access this computer from the network permission in User Manager.

    • The Domain Name was not specified together with the username (in the form of DOMAIN\username).

    Do any of these apply?

    Also as a side note I would recommend using SFTP instead of FTP - as you may know FTP transfers everything in cleartext (passwords included).

    • -1