Nichewares & Consulting, LLC

How to enable authentication from a default
domain on an FTP site in IIS 5.0

Create the FTP site. Using the Internet Information Services snap-in, view the properties for the ftp site. Click on the Security Accounts tab, and uncheck the “Allow Anonymous Access” option. Then at the bottom, add the domain account or group to have adminstrative access…click OK.

Next, IIS needs to be instructed to use a default domain for authentication by the FTP Service. To do this, a script in Inetpub\AdminScripts directory will be used. The name of the script is Adsutil.vbs. From a command prompt, run the following command:

c:\>cscript adsutil.vbs set msftpsvc/DefaultLogonDomain “Name of Your Domain”

i.e.
c:\>cscript adsutil.vbs set msftpsvc/DefaultLogonDomain “MYDOMAIN”

Finally, set the directory securtiy on this ftp site’s document root accordingly. For instance, if you have domain\group having administrative access to this site in the IIS snap-in, then set this group to have modify access on the site’s root directory.

That’s it! You can even allow cross-domain access by setting the appropriate ACL in the snap-in as well as on the site’s documents root directory.