Creating a FTP user manually on a Windows server requires several steps. It is important you read through this entire document and follow each step.
*Before creating FTP users please make sure your FTP site is created by following the guide below. If you have a site in IIS called FTP, then it is already created.*
Create Local User
The first step is to create the user on your server. All FTP users are local users assigned to your server through users and groups management. Please follow the steps below.
1. Open Server Management by navigating to Start Menu --> Control Panel --> Administrative Tools --> Server Manager.
2. Expand Configuration and then expand Local Users and Groups.
3. Right click on users and click on add new user. Fill in the form and choose user cannot change password and password never expires.
Now that the user has been created we need to add it to IIS so the FTP server can direct it to the proper home folder. Follow the steps below to do so.
Add User to FTP Site in IIS
1. Open IIS and expand sites by clicking the +. Find the site labeled "FTP" and click the + next to it to expand the site as well. Right click on the folder named “LocalUser” and click on add virtual directory. Use the image below for reference.
Note: If you do not see the directory "LocalUser" please contact us. One of our engineers can set this up for you.
For the Add Virtual Directory window, follow the convention below.
- Alias: The user name for the FTP user.
- Physical path: The folder you want to give the user access to.
2. Click ok after typing in the user name and choosing the folder. This will create a virtual directory under the folder LocalUser under the FTP site like the image below. Click once on this folder and then double click on FTP Authorization Rules.
3. Remove the all users rule by clicking on it and then then click remove on the right hand side.
4. Click on Add Allow Rule and choose the bubble next to specified user. Type in the user name you added and then give it the permissions desired.
Now that the user is added to IIS we need to add permissions to the directory it has access to. This is done through NTFS permissions.
1. Click on the virtual directory you created for the user in IIS and on the right hand side click on Edit Permissions...
2. Click on the security tab and then click on Edit.
3. Click on the add button and click cancel if you receive a login prompt.
4. Type in the user name as "Servername\username". IE: exam321\user.
Typing the server name first will avoid getting any popups asking for a user name and password. If you do receive this popup simply cancel. Your server is part of our domain and when you add users it tries to query the active directory server which you do not have access to. Alternatively you can click on Locations and then choose your server as the location. After choosing the location type in the user name or click on advanced and find now. Click ok to add the user to permissions.
5. Now you simply click on the user and choose the permissions you wish to give that user. If the user needs to be able to upload files and create folders, you will need to give that user Modify permissions. If the user only needs read access, then read and List folder contents is all you need.
- Full Control - This is meant for administrators and system users, never use this for a FTP user.
- Modify - Checking this box will automatically give all the correct permissions for read and write access.
- Read & Execute - Read access with ability to execute programs.
- List folder contents - Ability to list out folders.
- Read - Simple read access to files only, remember to check list folder contents as well for read access.
- Write - Ability to upload and create folders.
- Special Permissions - Never used for FTP users, these are custom permissions.
After you choose the permissions and click ok you're done. You can test the FTP user by connecting with a FTP client. Check the related KB articles below.