Using User Isolation to isolate users, so I have folder like this
\FTP\LocalUser
\FTP\LocalUser\Public
\FTP\domain\me
\FTP\domain\bob
The domain users are able to authenticate, login and see their home directory, but Anonymous users attempt to login as anonymous
and then are given the error User cannot log in, home directory inaccessible.
update
Using Process Monitor, I was able to determine that I'm getting access denied errors. Which makes sense, because domain users have access to the UNC Path via Active Directory, but anonymous will not, and its telling me it is impersonating NT AUTHORITY\IUSR -- how can I setup IIS FTP to impersonate a specific user if the access type is anonymous?
update 2
Is there a way to allow an IUSR account from MachineA to access a share on MachineB?
I ended up adding
<anonymousAuthentication enabled="true" userName="LimitedAccessDomainuser" password="pw" />
to the
applicationHost.config
file located at
c:\windows\system32\inetsrv\config\
A bit late.. But here goes:
FTP site > FTP Authentication > Anonmynous Authen enabled > Edit... > Set a functional user that has access to the UNC path > domain\user & password on the UNC folder : domain\user & password NTFS security = Read+Write
I checked in production and it worked like this. In IIS current session : Anonmynous.
Happy IIS days!