FTP Service Properties

You use the Service property sheet to control who can use your server and specify the account used for anonymous client requests to log on to the computer. Most Internet sites allow anonymous logons. If you allow anonymous logons, then all user permissions for the user, such as permission to access information, will use the IUSR_computername account. To use your current security system to control information access, change the anonymous logon account from IUSR_computername to an existing account on your network.

This property sheet also sets the comment in the Internet Service Manager Report view.

TCP Port

Determines the port on which the FTP service is running. The default is port 21. You can change the port to any unique TCP port number. For a new port number to take effect, you must restart your computer.

Connection Timeout

Sets the length of time in seconds before the server disconnects an inactive user. It is recommended that you not set this number lower than 100 seconds. The maximum you can set is 32,767 seconds. This value ensures that all connections are closed if the FTP protocol fails to close a connection.

Maximum Connections

Sets the maximum number of simultaneous connections to the server.

Allow Anonymous Connections

Sets the Windows NT user account to use for permissions of all anonymous connections. By default, Internet Information Server creates and uses the account IUSR_computername for all anonymous logons. Note that the password is used only within Windows NT; anonymous users do not log on using this user name and password.

Typically, anonymous FTP users will use "anonymous" as the user name and their e-mail address as the password. The FTP service then uses the IUSR_computername account as the logon account for permissions.

When you installed Internet Information Server, Setup created the account IUSR_computername in the Windows NT User Manager for Domains and in the Internet Service Manager. This account was assigned a random password. The password for this account must be the same, both in Internet Service Manager and in the Windows NT User Manager for Domains. If you change the password, you must change it in both places and make sure it matches. Note: This account must have a password. You cannot assign a blank password.

The IUSR_computername is granted Log on locally user rights by default. This right is necessary as long as you want to grant anonymous logon access to your site. Note: To grant access to a specific user, you must grant that user Log on locally rights.

Allow only anonymous connections

Select this box to allow only anonymous connections. With this box selected, users cannot logon with user names and passwords. This option prevents access by using an account with administrative permission; only the account specified for anonymous access is granted access.

Comment

Specifies the comment displayed in Internet Service Manager's Report view.

Current Sessions

Click to display the current FTP users.

See also: The Internet Information Server Installation and Administration Guide. Choose Help Topics from Internet Service Manager, or click the Product Documentation icon in the Microsoft Internet Server program group.


FTP User Sessions

Displays the currently connected FTP users.

Connected Users

Lists the currently connected users by IP address and when they connected.

Refresh Button

Press to update the display of connected users.

Disconnect Buttons

Press to disconnect the selected user, selected users, or all users.

See also: The Internet Information Server Installation and Administration Guide. Choose Help Topics from Internet Service Manager, or click the Product Documentation icon in the Microsoft Internet Server program group.


FTP Messages

Displays messages sent to clients. You can edit these messages as you like.

Welcome message

Displays this text to clients when they first connect to the FTP server.

Exit message

Displays this text to clients when they log off the FTP server.

Maximum connections message

Displays this text to clients that try to connect when the FTP service already has the maximum number of client connections allowed.

See also: The Internet Information Server Installation and Administration Guide. Choose Help Topics from Internet Service Manager, or click the Product Documentation icon in the Microsoft Internet Server program group.


FTP Directories

The FTP Directories property sheet sets directories and directory behavior for the FTP service.

Directory listing box

Lists the directories used by the FTP service.

Directory lists the path of directories used by the FTP service.

Alias is the path that FTP uses for virtual directories.

Error indicates system errors, such as difficulty reading a directory.

Add, Remove, and Edit buttons

To set up a directory, press the Add button or pick a directory in the Directory listing box and press the Edit button. The Remove button removes the directories you select.

Directory Listing Style

Choose the directory listing style to send to FTP users, whether you want files listed in UNIX or MS-DOS format. Because many browsers expect UNIX format, you should select UNIX for maximum compatibility.

See also: The Internet Information Server Installation and Administration Guide. Choose Help Topics from Internet Service Manager, or click the Product Documentation icon in the Microsoft Internet Server program group.


FTP Directory Properties

Configure the FTP service directories by using this dialog box.

Directory

Sets the path to the directory to use for the FTP service.

Browse button

Use to select the directory to use for the FTP service.

Home Directory

Choose this to specify the root directory for the FTP service.

Internet Information Server provides a default home directory, \Ftproot, for the FTP service. The files that you place in the FTP home directory, and its subdirectories, are available to remote browsers. You can change the location of the default home directory.

Virtual Directory

Choose this to specify a subdirectory for the FTP service.

Alias Enter a name for the virtual directory. This is the name that is used to connect to the directory.

Enter the directory name or "alias" that service users will use.

You can add other directories outside the home directory that are accessible to browsers as subdirectories of the home directory. That is, you can publish from other directories and have those directories accessible from within the home directory. Such directories are called “virtual directories.”

Note that virtual directories will not appear in FTP directory listings; FTP users must know the virtual directory's alias, and type in its URL address in the FTP application or browser.

The administrator can specify the physical location of the virtual directory and the virtual name (alias), which is the directory name used by remote browsers.

The published directories can be located on local or network drives. If the virtual directory is a network drive, provide the user name and password with access to that network drive. Virtual directories on network drives must be on computers in the same Windows NT domain as the Internet Information Server.

Account Information

This box is active only if the directory specified in the first line of this dialog box is a Universal Naming Convention (UNC) server and share name, for example, \\Webserver\Htmlfiles. Enter the user name and password that has permission to use the network directory. Virtual directories on network drives must be on computers in the same Windows NT domain as the computer running Internet Information Server.

Important  If you specify a user name and password to connect to a network drive, all Internet Information Server access to that directory will use that user name and password. You should use care when using UNC connections to network drives to prevent possible security breaches.

Access check boxes

The Access check boxes control the attributes of the directory. If the files are on an NTFS drive, NTFS settings for the directory must match these settings.

Read must be selected for FTP directories.

Write allows clients to write files to the FTP server. Select this only for directories that are intended to accept files from users.

See also: The Internet Information Server Installation and Administration Guide. Choose Help Topics from Internet Service Manager, or click the Product Documentation icon in the Microsoft Internet Server program group.


FTP Logging Properties

The Logging property sheet sets logging  for the selected information service.

Logging provides valuable information about how a server is used. You can send log data to files or to an Open Data Base Connectivity (ODBC)–supported database. If you have multiple servers or services on a network, you can log all their activity to a single file or database on any network computer.

If you want to log to a file, you can specify how often to create new logs and which directory put the log files in. The Convlog.exe command prompt command converts log files to either European Microsoft Windows NT Academic Centre (EMWAC) log files or the common log file format.

If you log to an ODBC data source, you must specify the ODBC Data Source Name (DSN), table, and valid user name and password to the database.

Enable Logging

Select this box to start or stop logging for the selected information service.

Log to File

Choose this option to log to a text file for the selected information service.

Log Format

Click the down arrow and choose either Standard format or National Center for Supercomputing Applications (NCSA) format.

Automatically open new log

Select this box to generate new logs at the specified interval. If not selected, the same log file will grow indefinitely.

Log file directory

Shows the path to the directory containing all log files. To change directories, click Browse and select a different directory.

Log file filename

Names the log file. The lowercase letters yy will be replaced with the year, mm will be replaced with the month, and dd will be replaced with the day.

Log to SQL/ODBC Database

Choose to log to any ODBC data source. Set the Datasource name, Table name (not the file name of the table), and specify a user name and password that is valid for the computer on which the database resides. You must also use the ODBC applet in Control Panel to create a system data source.

See also: The Internet Information Server Installation and Administration Guide. Choose Help Topics from Internet Service Manager, or click the Product Documentation icon in the Microsoft Internet Server program group.


FTP Advanced Properties

The Advanced property sheet sets access by specific IP address to block individuals or groups from gaining access to your server. You can also set the maximum network bandwidth for outbound traffic, to control the maximum amount of traffic allowed on your server.

IP Access Control

You can control access to each Internet service by specifying the IP address of the computers to be granted or denied access.

If you choose to grant access to all users by default, you can then specify the computers to be denied access. For example, if you have a form on your WWW server and a particular user on the Internet is entering multiple forms with fictitious information, you can prevent the computer at that IP address from connecting to your site. Conversely, if you choose to deny access to all users by default, you can then specify which computers are allowed access.

Granted Access

Choose this option, then click the Add button to list computers that will be denied access.

Denied Access

Choose this option, then click the Add button  to list computers that will be granted access.

Add

To add computers that you want to deny access to, select the Granted Access button and click Add. Conversely, to add computers that you want to grant access to, select the Denied Access button, and click Add.

Limit Network Use by all Internet Services on this computer

You can control your Internet services by limiting the network bandwidth allowed for all of the Internet services on the server. Set the maximum kilobytes of outbound traffic permitted on this computer.

See also: The Internet Information Server Installation and Administration Guide. Choose Help Topics from Internet Service Manager, or click the Product Documentation icon in the Microsoft Internet Server program group.


FTP Grant or Deny Access

Choose Single Computer and provide the Internet Protocol (IP) address to exclude a single computer. Choose Group of Computers and provide an IP address and subnet mask to exclude a group of computers. Press the button next to the IP address to use a domain name system (DNS) name instead of IP address. Your server must have a DNS server specified in its TCP/IP settings.

You are specifying, by IP address or domain name, which computer or group of computers will be granted or denied access. If you choose to, by default, grant access to all users, you will specify the computers to be denied access. If you choose to, by default, deny access to all users, you will then specify the specific computers to be allowed access. You should fully understand Transmission Control Protocol/Internet Protocol (TCP/IP) networking, IP addressing, and the use of subnet masks to use this option.

See also: The Internet Information Server Installation and Administration Guide. Choose Help Topics from Internet Service Manager, or click the Product Documentation icon in the Microsoft Internet Server program group.


Basic (clear text authentication)
Internet Service Manager Authentication Options

In addition to the "anonymous logon" user name and password fields, the Service property sheet of Internet Service Manager contains the following authentication options:

FTP

Allow Anonymous Connections   When this check box is selected, FTP logons in which the user enters a user name of "anonymous" will be processed. These anonymous connections will be processed on behalf of the Windows NT user account specified on the Service property sheet. When this check box is cleared, users will be required to enter valid Windows NT user names and passwords to log onto the FTP service.

Allow only anonymous connections   When this check box is selected, all user logons except "anonymous" will be rejected.

Warning: FTP user names and passwords are sent across the network in clear text. When this check box is cleared, Windows NT passwords will be sent to the server without encryption. This check box is checked by default for security reasons.

See also: The Internet Information Server Installation and Administration Guide. Choose Help Topics from Internet Service Manager, or click the Product Documentation icon in the Microsoft Internet Server program group.


Select the directory you want or create a new directory by typing a name in the New Directory Name box.


Help not available.