IIS 7 FTP Using UNC Path for "home" directory Anonymous users Home Directory cannot login

Thursday, April 8, 2010 by Nate Bross

Someone asked on Server Fault:

Using User Isolation to isolate users, so I have folder like this

\FTP\LocalUser
\FTP\LocalUser\Public
\FTP\domain\me
\FTP\domain\bob

The domain users are able to authenticate, login and see their home directory, but Anonymous users attempt to login as anonymous and then are given the error User cannot log in, home directory inaccessible.

update

Using Process Monitor, I was able to determine that I’m getting access denied errors. Which makes sense, because domain users have access to the UNC Path via Active Directory, but anonymous will not, and its telling me it is impersonating NT AUTHORITY\IUSR — how can I setup IIS FTP to impersonate a specific user if the access type is anonymous?

update 2

Is there a way to allow an IUSR account from MachineA to access a share on MachineB?

I posted the following answer, which was chosen as the accepted answer:

I ended up adding

<anonymousAuthentication enabled="true" userName="LimitedAccessDomainuser" password="pw" />

to the

applicationHost.config

file located at

c:\windows\system32\inetsrv\config\

Originally posted on Server Fault — 0 upvotes (accepted answer). Licensed under CC BY-SA.