Technical

Creating an FTP site in IIS 7.x

Follow

This article shows you how to create an FTP site in IIS7 and above.

If you want to upload large volumes of files to your Asset Bank (or if you have users uploading in parts of the world with poor internet connectivity) you may want to make use of Asset Bank's FTP feature. This allows you to transfer files via FTP into an upload folder before logging into Asset Bank and completing the upload and metadata. This article shows you how to set up FTP on Windows servers using IIS 7 or above.

Installing FTP for IIS 7.5

IIS 7.5 FOR WINDOWS SERVER 2008 R2

  1. On the taskbar, click Start, point to Administrative Tools, and then click Server Manager.
  2. In the Server Manager hierarchy pane, expand Roles, and then click Web Server (IIS).
  3. In the Web Server (IIS) pane, scroll to the Role Services section, and then click Add Role Services.
  4. On the Select Role Services page of the Add Role Services Wizard, expand FTP Server.
  5. Select FTP Service. (Note: To support ASP.NET Membership or IIS Manager authentication for the FTP service, you will also need to select FTP Extensibility.)
  6. Click Next.
  7. On the Confirm Installation Selections page, click Install.
  8. On the Results page, click Close.

IIS 7.5 FOR WINDOWS 7

  1. On the taskbar, click Start, and then click Control Panel.
  2. In Control Panel, click Programs and Features, and then click Turn Windows Features on or off.
  3. Expand Internet Information Services, then FTP Server.
  4. Select FTP Service. (Note: To support ASP.NET Membership or IIS Manager authentication for the FTP service, you will also need to select FTP Extensibility.)
  5. Click OK.

Installing FTP for IIS 7.0

PREREQUISITES

The following items are required to complete the procedures in this section:

  1. You must be using Windows Server 2008.
  2. Internet Information Services 7.0 must be installed.
  3. If you are going to manage the new FTP server by using the IIS 7.0 user interface, the administration tool will need to be installed.
  4. You must install the new FTP server as an administrator. (See the Downloading and Installing section for more.)
  5. IIS 7.0 supports a shared configuration environment, which must be disabled on each server in a web farm before installing the new FTP server for each node. Note: Shared configuration can be re-enabled after the FTP server had been installed.
  6. The FTP server that is shipped on the Windows Server 2008 DVD must be uninstalled before installing the new FTP server.

DOWNLOADING THE RIGHT VERSION FOR YOUR SERVER

There are two separate downloadable packages for the new FTP server; you will need to download the appropriate package for your version of Windows Server 2008:

LAUNCHING THE INSTALLATION PACKAGE

You will need to run the installation package as an administrator. This can be accomplished by one of the following methods:

  1. Logging in to your server using the actual account named "Administrator", then browsing to the download pages listed above or double-clicking the download package if you have saved it to your server.
  2. Logging on using an account with administrator privileges and opening a command-prompt by right-clicking the Command Prompt menu item that is located in the Accessories menu for Windows programs and selecting "Run as administrator", then typing the appropriate command listed below for your version of Windows to run the installation:
    • 32-bit Windows Versions:
      • msiexec /i FTP 7_x86_75.msi
    • 64-bit Windows Versions:
      • msiexec /i FTP 7_x64_75.msi

Note: One of the above steps is required because the User Account Control (UAC) security component in the Windows Vista and Windows Server 2008 operating systems prevents access to your applicationHost.config file. For more information about UAC, please see the following documentation:

Once you have started the installation and accepted the license terms you'll need to choose the options for the installation:

  • Common files: this option includes the schema file. When installing in a shared server environment, each server in the web farm will need to have this option installed.
  • FTP Publishing Service: this option includes the core components of the FTP service. This option is required for the FTP service to be installed on the server.
  • Managed Code Support: this is an optional component, but features that use managed extensibility require this option before using them, such as ASP.NET and IIS manager authentication. Note: This feature cannot be installed on Windows Server 2008 Core.
  • Administration Features: this option installs the FTP 7 management user interface. This requires the IIS 7.0 manager and .NET framework 2.0 to be installed. Note: This feature cannot be installed on Windows Server 2008 Core.

Once you have installed the FTP service you will be ready to create a new FTP site. Note: The settings listed in this walkthrough specify "%SYSTEMDRIVE%\inetpub\ftproot" as the path to your FTP site. You are not required to use this path; however, if you change the location for your site you will have to change the site-related paths that are used throughout this walkthrough.

  1. Open IIS Manager. In the Connections pane, click the Sites node in the tree.
  2. As shown in the image below, right-click the Sites node in the tree and click Add FTP Site, or click Add FTP Site in the Actions pane.
    • Create a folder at "%SystemDrive%\inetpub\ftproot"
    • Set the permissions to allow anonymous access:
      1. Open a command prompt.
      2. Type the following command: 
        ICACLS "%SystemDrive%\inetpub\ftproot"/Grant IUSR:R /T
      3. Close the command prompt.
  5. When theAdd FTP Sitewizard appears:
    • Enter "My New FTP Site" in the FTP site name box, then navigate to the %SystemDrive%\inetpub\ftproot folder that you created in the Prerequisites section. Note that if you choose to type in the path to your content folder, you can use environment variables in your paths.
    • When you have completed these items, click Next.
    • Choose an IP address for your FTP site from theIP Addressdrop-down, or choose to accept the default selection of "All Unassigned." Because you will be using the administrator account later in this walk-through, you must ensure that you restrict access to the server and enter the local loopback IP address for your computer by typing "127.0.0.1" in theIP Addressbox. (Note: If you are using IPv6, you should also add the IPv6 localhost binding of "::1".)
      • Enter the TCP/IP port for the FTP site in the Port box. For this walk-through, choose to accept the default port of 21.
      • For this walk- through, do not use a host name, so make sure that the Virtual Host box is blank.
      • Make sure that the Certificates drop-down is set to "Not Selected" and that the Allow SSL option is selected.
      • When you have completed these items, click Next.
  8. On the final page of the wizard:
    • Select Anonymous for the Authentication settings.
    • For the Authorization settings, choose "Anonymous users" from the Allow access to drop-down, and select Read for the Permissionsoption.
    • When you have completed these items, click Finish.

  9. You have successfully created a new FTP site using the new FTP service. To recap the items that you completed in this step:

    1. You created a new FTP site named "My New FTP Site", with the site's content root at "%SystemDrive%\inetpub\ftproot".
    2. You bound the FTP site to the local loopback address for your computer on port 21, and you chose not to use Secure Sockets Layer (SSL) for the FTP site.
    3. You created a default rule for the FTP site to allow anonymous users "Read" access to the files.
    Now you will need to add some additional security settings to enable FTP for certain users.

  10. Creating a new FTP site that anonymous users can browse is useful for public download sites, but web authoring is equally important. In this step, you add additional authentication and authorization settings for the administrator account. To do so, follow these steps:

    1. In IIS Manager, click the node for the FTP site that you created earlier, then double-click FTP Authentication to open the FTP authentication feature page.
    2. When the FTP Authentication page displays, highlight 'Basic Authentication' and then click Enable in the Actions pane.
    3. In IIS Manager, click the node for the FTP site to re-display the icons for all of the FTP features.
    4. You must add an authorization rule so that the administrator can log in. To do so, double-click the FTP Authorization Rules icon to open the FTP authorization rules feature page.
    5. When the FTP Authorization Rules page is displayed, click 'Add Allow Rule' in the Actions pane.
    6. When the Add Allow Authorization Rule dialog box displays:
      • Select 'Specified users', then type "administrator" in the box (or enter the names of specific users).
      • For Permissions, select both Read and Write.

Comments

0 comments

Please sign in to leave a comment.