Virtual Directory Domain User Authentication

[mswajkowski]

I have a Windows 2000 server running IIS5. FTP was working fine in the past, where virutal directories were setup for each domain user.

Now, only Administrators can log on. When a Domain User attempts to log on, he is denied access. Event log:

Source: MSFTPSVC
Event ID: 100
Description: The server was unable to logon the Windows NT account 'domain\username' due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. The data is the error code.
For additional information specific to this message please visit the Microsoft Online Support site located at:

http://www.microsoft.com/contentredirect.asp.

I have followed all of the guidance documents for adding users to 'Log on Locally', for both the Group Policy from the AD as well as the Local Security policy on the IIS server.

Further, if I create a Virutal Directory to a UNC under the Default Web, I can authenticate the connection using the administrator account, but not a valid domain user accont that has the appropriate priviledges.

I have tried to simulate this on other IIS server, both in-house and development servers and I can not. Everything works on those servers.

The only change to the server that we can pinpoint is the upgrade from Exchange 2000 to 2003. We tried to replicate the problem on another server by upgrading Exchange from 2000 to 2003, and everything works fine on the test server.

This one has me stumped.

Thanks in advance...

Matthew

 

[JayIntec]

I have the same problem with my server. Still llooking for an answer.

Thanks for posting.

J

 

[70charger]

THe folder you created needs to have the local group users and or everyone added to it.

I just created a virtual director and had the same problem. So I went to my folder d:\jojo and added the ntfs permission. seems to work.

 

[mswajkowski]

The folder has NTFS 'Everyone' permissions, but it still does not work. As time was critical, I simply moved my FTP services to another ISS server.

 

[fdinger]

the only thing that i can think of is make sure that access is granted to everyone in your file permissions besides that i dont how i can help you.

Josh Freudinger
-

http://napalmfiesta.cjb.net