setting msIIS-FTPRoot and msIIS-FTPDir not working

[Edward Balassanian]

I have setup an FTP Server with user isolation using
Active Directory. As instructed I tried to set the user
properties for msIIS-FTPRoot and msIIS-FTPDir using
iisref.vbs. Both keys are said to be invalid:

C:\Inetpub\AdminScripts>iisftp /SetADProp edwardb msIIS-
FTPDir edwardb /s CORP1
Invalid argument: msIIS-FTPDir

I found some reference in the help that listed the
attributes as FTPDir/FTPRoot instead of msIIS-FTPDir/msIIS-
FTPRoot respectively. I tried these and iisref seemed to
have set the values:

C:\Inetpub\AdminScripts>iisftp /SetADProp edwardb FTPDir
edwardb
The value of FTPDir for user edwardb has been set to
edwardb

I tried setting FTPRoot as well (d:\internet\ftproot
corresponds to a share \\CORP1\ftproot):

C:\Inetpub\AdminScripts>iisftp /SetADProp edwardb FTPRoot
d:\internet\ftproot
The value of FTPRoot for user edwardb has been set to
d:\internet\ftproot

C:\Inetpub\AdminScripts>iisftp /SetADProp edwardb FTPRoot
\\CORP1\ftproot
The value of FTPRoot for user edwardb has been set to
\\CORP1\ftproot

Regardless of what I set these values to when I try to ftp
in I get a message that the home directory is
inaccessible. Any suggestions on what I am doing wrong
would be greatly appreciated.

Edward

[Bernard]

Not sure. but if you set to to a local path, do you
get the same error.

If no, try get filemon (sysinternals.com), run in on the server,
ftp locally, and see where's the actual path, user is trying
to access, and check related permission.

--
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...

"Edward Balassanian" <edw...@becomm.com> wrote in message
news:097601c36672$24b6cad0$a001...@phx.gbl...

[Edward Balassanian]

I will do as you suggest, though that does not address the
problem I had with the attribute names. In 2003 server is
the attribute name FTPDir/FTPRoot or msIIS-FTPDir/msIIS-
FTPRoot? The former are the only ones that iisref seem to
accept, though all the documentation on the schema I read
seem to suggest the latter are the correct values.

>.
>

[Edward Balassanian]

It was too difficult to extract the apppropriate entry
from filemon since there is so much noise... but I did
look in the event viewer and see the following:

User administrator failed to log on, could not access the
home directory /.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

This happens every time I try to ftp in as administrator.
I have set the FTPRoot and FTPDir values for administrator
but apparrently they are being ignored.

Edward

>.
>

[Bernard]

The FTPdir and FTPRoot is correct if you using iisftp.vbs
refer
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/proddocs/standard/cl_as_isoftp.asp

the msIIS-FTPxxx is the AD schema key I guess. Now I would
suggest your try local path first, after you create the ftp sites,
use /setadprop for ftproot and ftpdir then do a /getadprop

check NTFS permission as well.

I had actually tested myself weeks ago when a user reported
similar problem. try search the msgs within this month.

--
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...

"Edward Balassanian" <edw...@becomm.com> wrote in message

news:04bb01c36761$04f416e0$a401...@phx.gbl...

[Edward Balassanian]

Bernard,

Thanks for the suggestions. I tried a local path as well
and had the same result. The issue seems to be that the
ftp service is not looking at the values I set for FTPDir
and FTPRoot. I have also tried logging on using the
administrator account to avoid any permission issues but
it fails as well.

Edward

>.
>

[Bernard]

What is the local path your configure ?
ftproot ?
ftpdir ?

Get filemon. and see what's the actualy directory
the user is trying to get in, check ntfs permission too.

--
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...

"Edward Balassanian" <edw...@becomm.com> wrote in message

news:0e2001c367fa$700b2790$a501...@phx.gbl...