Windows XP Pro - users and rights

Question

The edtFTPD server is running on Windows XP, it was installed into c:\edtftpd\ directory.

After default installation and after changing the 513->544 in the passwd file I found another issue:

Only the users belonging into Administrators group can access the c:\edtftpd\ directory and its subdirectories, so as a result all ftp users have to be members of Administrators group. Users that do not belong to Administrators group are not allowed to log-in (error 530).

Of course I can change access rights to c:\edtftpd\ to "Everyone" group, however doesn't this impose some security risks ?

Answer 1

Please disregard my previeus questions. The inability to log-in was caused by my security setting progibiting FTP users to log-in locally. :oops:

Is there any way how to allow FTP access and prevent local login at the same time?

Answer 2

I'm not really sure what you mean, but since edtFTPD is actually a repackaged version of ProFTPD, you can use most of the ProFTPD directives. You can place any additional directives between the lines marked "CUSTOMSETTINGS BEGIN" and "CUSTOMSETTINGS END". Make sure edtFTPD Manager (i.e. the GUI) is not running when you're editing the file as your changes will be overwritten. It's OK for the edtFTPD service itself to be running.

- Hans (EDT)

Answer 3

Thank you for the link to ProFTPD directives, however this is not going to solve my problem. I will try to describe it in other words:

I want to have group of users that are allowed to connect to the FTP server using FTP client while preventing the same users to log
on to the computer using keyboard physically connected to the server.

The FTP server is located in a freely accessible room - I want to prevent my coleagues, which have an FTP account, from logging on locally.

I tried to remove the group "Users" from the list of groups allowed to log on locally in Windows XP:
Administrative tools - Local security settings - Local Policies - User Rights Assignments - Log on locally
Unfortunately this prevented the users from accessing the FTP server too.

Answer 4

The message above was written by me too.