Windows 2003 to complete the FTP user isolation small trick

In the win2003 system, starting from IIS6.0, FTP has added a brand new feature "user isolation", through this function, users can achieve different user login Different directories, which facilitates the management of the FTP server, but how is it achieved? Let's study it.

Pay attention to the following issues when configuring the isolation of the FTP server:

(1) First create a directory such as: 51CTODIR

(2) Create in the 51CTODIR directory. A directory is "localuser", this directory mainly stores the data of each user;

(3) Create the corresponding directory in the localuser directory with the name of the user, such as user zhangsan, then in the loaluser directory Create a directory in the same zhangsan, if necessary, set the appropriate permissions of zhangsan to the zhangsan directory, but the default is read-only, if you want to have other permissions, you should modify the FTP site to write permissions.

(4) If you want to implement anonymous user login, you need to create a directory public in the localuser directory, which is the directory accessed by anonymous users

(5) Create the corresponding user

The specific process is as follows:

First, create a user account

First, create some user accounts for FTP users on the Windows Server 2003 server where the FTP site is located, so that they can use these accounts. Log in to the FTP site. The steps are as follows:

Step 1 Right-click on the desktop and click “My Computer” to execute the “Manage” command in the shortcut menu that pops up.

Step 2 Open the “Computer Management” window and expand the “Local Users and Groups” directory in the left pane. Then right-click the “user” folder in the expanded directory and execute the “New User" command in the pop-up shortcut menu to open the “New User" dialog box.

Step 3 In the relevant edit box, type the user name (such as “xiaowei”) and password, cancel “users need to change the password when they log in next time" option and check “ users can not be more The password & rdquo; and & ldquo; password never expires & rdquo; two, and finally click the & ldquo; create & rdquo; button.

Step 4 This will bring up the next “New User” dialog box, adding several users as needed. Once created, click the “Close” button.

Second, the planning directory structure

After creating some user accounts, another key operation started: planning the folder structure (it is to create some folders).

Why is it important to create a folder? This is because the FTP site that creates the "User Isolation" mode has certain requirements for the folder name and structure. First, you must create a folder in the NTFS partition as the home directory of the FTP site (such as "CceFTP"), and then create a subfolder named "LocalUser" under the folder "CceFTP", and finally at “ Under the LocalUser” folder, create a number of personal folders that correspond to the user's account.

In addition, if you want to allow users to log in to the FTP site of the "User Isolation" mode anonymously, you must create a folder named "Public" under the "LocalUser" folder. After the anonymous user logs in, he can enter the “Public” folder to read and write.

Tip: The subfolder name under the FTP site home directory must be "LocalUser", and the user folder created under it must be the same name as the related user account, otherwise it will not be used. The user account is logged in.

Third, install the FTP component

The FTP site created in Windows Server 2003 "user isolation mode" requires IIS 6.0 support, but by default IIS 6.0 components are not Installation, so a brief talk about how to manually install IIS 6.0 components.

Step 1 Double-click the “Add or Remove Programs” icon in the “Control Panel” dialog box. Click “Add/Remove Windows” in the “Add or Remove Programs” dialog box that opens. The "Components" button opens the "Windows Components Wizard" dialog box.

Step 2 Locate and double-click the "Application Server" checkbox in the "Components" list, double-click "Internet Information Service" in the "Application Server" dialog box that opens. (IIS) & rdquo; option, open the "Internet Information Services (IIS)" dialog box. Find and check the "File Transfer Protocol (FTP) Service" checkbox in the list of subcomponents and click the "OK/OK/Next" button to start the installation. Finally click the “Complete" button to end the installation process.

Tip: During the installation process, you need to insert the installation CD of Windows Server 2003 or specify the installation source file.

IV. Creating an FTP Site

At this point, all the preparations have been completed. The next step is the core link that readers are most concerned about: creating an FTP site with “User Isolation” mode. The specific setup steps are as follows:

Step 1 Click “Start/Manage Tools/Internet Information Services (IIS) Manager” to open the “Internet Information Service (IIS) Manager”. window. In the left pane, right-click the “FTP Site” option and execute the “New/FTP Site” command in the shortcut menu that pops up. Open the “FTP Site Creation Wizard” and click on the wizard page. “ Next step & rdquo; button.

Step 2 Type a line description in the "FTP Site Description" wizard page that opens and click the "Next" button.

Step 3 Open the “IP Address and Port Settings” page and select an IP address for accessing the FTP site in the “Enter the IP address used by this FTP site” drop-down menu. Keep the default “21”, click the “Next” button.

Step 4 In the "FTP User Isolation" page that opens, click the "Isolate User" radio button and click the "Next" button (Figure 4).

Step 5 Open the “FTP Site Home Directory” wizard page, click the “Browse” button to find the previously created folder, and then click the “OK/Next” button.

Step 6 Check the “Write” checkbox in the "FTP Site Access Permissions" wizard page that opens, and then click the "Next/Finish" button to complete the creation. .

V. Log in to the FTP site

Tip: User login is divided into two cases: If you log in as an anonymous user, you can only read it in the “Public” directory after successful login. Write operation; if you are logged in as a valid user, the user can only read and write in his own directory, and can not see other users' directories and “Public” directory.

In the win2003 system, as a server type system, only one convenient management is required for it, and the FTP server implements user isolation setting, which is a very good function for the administrator. I hope this setting step Can help users.