Giving members of AD group access to CompleteFTP Manager

Question

A user asked how they can control access to CompleteFTP Manager by adding and removing AD users to and from an AD group.

Answer 1

You can do this in the Enterprise MFT Edition by adding a new (fake) Windows account, giving admin privileges and then making it the log-in-as user for the Windows/AD group authenticator on the Admin site. Instructions are given below:

1. Open CompleteFTP Manager

2. Go to the User panel

3. Click Add user -> Windows user(s)

4. Select any Windows account. It doesn’t matter which user, as we’ll be changing the user-name.

5. Now change the Username property to something that's not the username of an existing Windows account, e.g. WindowsAdminTemplate

6. Make sure Show system users/folder/sites is enabled

7. Select the user you just created

8. Click on the ellipsis button for Sites & home folders

9. Disable the Default Site and enabled the Admin site

10. Set the home folder for the Admin site to /Admin

11. Set the Access control property to Non-Windows

12. You may also like to select WebAdmin as the home web-app for the user

13. Click on the Groups link below the user list.

14. Click Add selected users to group -> admins

15. In the Authenticators panel, select Admin in the For site dropdown

16. Enable the Windows/AD Group authenticator

17. Click on the Log in as column in the Windows/AD Group and select WindowsAdminTemplate

18. Click Configure...

19. Click Add allowed AD or Windows group

20. Enter the name of the AD group that the users who you want to give CompleteFTP Manager access to

21. Click OK

22. Click Apply changes