How to Log Incoming Connections with FTP Server

WARNING: Using Registry Editor incorrectly can cause serious, system-wide problems that may require you to reinstall Windows NT to correct them. Microsoft cannot guarantee that any problems resulting from the use of Registry Editor can be solved. Use this tool at your own risk.

The Windows NT File Transfer Protocol (FTP) Server software allows the network administrator to optionally log incoming connections in the Event Viewer, both from anonymous as well as nonanonymous users.

To activate logging, use the following procedure:

1. Open the Registry Editor (REGEDT32.EXE).
2. Use the following path:

         HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FtpSvc
         \Parameters

3. From the Edit menu, choose Add Value to create the following entries:

         LogAnonymous
         LogNonAnonymous

4. Set the Data Type of both values to REG_DWORD.
5. Set the Data to 1 for both entries, leaving Hex as the default.

FTP Connections will now be logged to the System event log and can be viewed using Event Viewer.