Forum Home
Press F1
Thread ID: 66381	2006-02-20 21:44:00	FTP Server Problem...	TiJay (6055)	Press F1

Post ID	Timestamp	Content	User
432474	2006-02-20 21:44:00	Ok, I'm about 3 seconds away from getting a bigger hammer for this job... :badpc: Perhaps one of you can help me. I am the Network Administrator at my Clinic...The Licensing Dept. has a need to make numerous large files available to certain people, so - naturally, I set up an FTP Server. Background: We just bought a Dual 3.8GHz Dell Poweredge to run our Domain. I love it. I took the old Dual 1GHz PowerEdge and installed Windows 2000 Professional, set up the FTP Server, allowed certain people certain access priveledges, and Everything was GREAT! It worked for weeks, and I only had to boot out 2 or 3 hackers...doing what in my server, I don't know, becuase the FTP server isn't on the domain, and has a seperate IP address than the rest of the clinic, plus, it doesn't have access to do/change anything on the pc itself - pretty much, they were able to look at a pretty powerpoint presentation and play some of my music, and watch a few of our promotional DVDs...wow... Either way - Someone needed to get to our FTP Server for said PowerPoint Presentation, so - I created a username/password for him, gave limited access (list contents, and read) allowing them ONLY permission to copy it from the server to their PC...nothing else...got an eMail - It isn't letting me get it. Some sort of Error...it keeps saying Error 550 Error 550 is access denied...so I fiddle around with it...for 4-5 hours, deleting, the user, recreating with the same name, different name, different descriptions, passwords, groups, rights...Hell, I made that user God on that PC - able to do EVERYTHING...and I was still getting the 550 Error... That isn't the confusing part...If that was it, I'de check the IIS settings, blah blah blah...no - I log in with my Username/Password - and it works o.0 Log in with EVERYONE ELSE'S Username/Password...and it works... I think my server has it in for the Marketing Dept of the Licensing Division. Someone help me, PLEASE?! I may not be on PC World, so just contact me through MSN Messenger or Yahoo! (both of those links are on my User Profile) Much Obliged!	TiJay (6055)
432475	2006-02-20 22:14:00	TJ, how about making copy of default user, then overwrite the default user profile with working username. New users will then use working profile!	SolMiester (139)
432476	2006-02-20 22:19:00	I did think about that, but either I can't remember, or I never knew how to copy an existing user account...could ya help me out?	TiJay (6055)
432477	2006-02-20 22:35:00	TJ, no worries, 1st copy default user (may need to go into folder options and enable show hidden files blah blah), then paste copy to same directory, this will then be shown as 'copy of Default User'. Then got to Control Panel>System>advance TAB>user profiles> select the profile that works which is okay for everyone to use, selct copy to and browse to the folder 'default user', it will then ask for permissions, select either everyone OR the group you have defined to access the server, then okay. Now when new user created, it will use working profile. If it still doesnt work, it will be rights associated with the group. check the working profile. Remember their are IIS rights and folder rights.	SolMiester (139)
432478	2006-02-21 00:05:00	Is that user on the same network? If not, the account might have too much privilege. In *nix systems there's usually a default security setting so that "root" can't FTP from outside the LAN. But, as always in these situations: READ THE LOGFILES. It has told the user "You can't do that". It should have told the log files why not. That's always a better approach than randomly removing security. :D	Graham L (2)
432479	2006-02-21 01:36:00	Good point Graham, however OP already advise this is for the 'Marketing Dept' of their office. I believe you are concerned with the 'Guest' account	SolMiester (139)
432480	2006-02-21 04:04:00	Good point Graham, however OP already advise this is for the 'Marketing Dept' of their office. I believe you are concerned with the 'Guest' accountNo, Im concerned about "...so I fiddle around with it...for 4-5 hours, deleting, the user, recreating with the same name, different name, different descriptions, passwords, groups, rights...Hell, I made that user God on that PC - able to do EVERYTHING...and I was still getting the 550 Error...". :( Often Marketing, Accounts, and other "departments" have their own networks, for security reasons. In fact, I see from a second look that the FTP server is not in the same domain. This might be part of the problem.	Graham L (2)
432481	2006-02-21 04:56:00	LMAO....hehe, yeah, dont you just luv it. However the stand alone must have a trust in order for existing dept to access, dont know any dept not on same domain. The worry for me is if not on domain why, DMZ perhaps, and if he doesnt know how to config properly, whats he doing with FTP on DMZ?	SolMiester (139)
432482	2006-02-21 05:23:00	Thinking about it, it's probably just got its own (non routable) IP address, and is not registered into the Microsoft network domain . So it's "on the cable", but it's not "of" the LAN, and can't be seen outside . This is probably as secure as it needs to be . It hasn't got any rights on the the MS network; it's just a server outside of it . But . . . I'm just guessing . TiJay? Whaytdo the log files tell you?	Graham L (2)
432483	2006-02-21 19:15:00	Is that user on the same network? If not, the account might have too much privilege . In *nix systems there's usually a default security setting so that "root" can't FTP from outside the LAN . But, as always in these situations: READ THE LOGFILES . It has told the user "You can't do that" . It should have told the log files why not . That's always a better approach than randomly removing security . :D I did check the logfiles - and it just says error 550 . . .	TiJay (6055)
1 2