Article ID: 310723
We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 7.0 running on Microsoft Windows Server 2008. IIS 7.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:
http://www.microsoft.com/technet/security/prodtech/IIS.mspxFor more information about IIS 7.0, visit the following Microsoft Web site:
This article describes how to configure the IIS FTP server for FTP authentication and how to automatically use the domain user database rather than your local user accounts database, so that your users can access FTP folders by using their familiar login without having to explicitly specify their domain information.
Important Warning: FTP passwords are sent over networks in "clear text" and are therefore easily stolen, especially on the Internet. For this reason, many administrators set up FTP sites for anonymous read-only access, and use file sharing if local network write access is needed or use the FrontPage Server Extensions for Internet publishing.
For more information about using, configuring, and troubleshooting the FTP service in IIS, click the following article numbers to view the articles in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/184319/ )FTP service's DefaultLogonDomain not available in MMC
(http://support.microsoft.com/kb/200475/ )Error message in IIS: "530 User <Username> cannot log in. Login failed."
(http://support.microsoft.com/kb/175638/ )FTP login using domain and trusted domain accounts