Note:
When a site is created with Isolate Users Using Active Directory mode, the Path property of the root FTP virtual directory (which, for the other isolation modes identifies the home directory) is set empty. Also, the AccessFlags property of the root FTP virtual directory contains the AccessNoPhysicalDir flag. Do not alter these two values. If you change or remove them, further access to the site is not allowed

******************************
******************************

Converting an Existing FTP Site to Isolate Users Using Active Directory Mode (IIS 6.0)

You can convert an existing FTP site to Isolate users using Active Directory mode after you upgrade to Windows Server 2003. Before you convert an existing FTP site to the Isolate users using Active Directory mode, complete the following procedure.

To prepare to convert an existing FTP site to Isolate users using Active Directory mode

1.Plan user distribution over your network file server resources.

2.Create server shares and user directories for all users that have access to FTP.

3.Make sure to create a directory for anonymous access (if you want to enable anonymous user connections).

4.For each user, set the msIIS-FTPRoot and msIIS-FTPDir properties in Active Directory to point to the new home directory using Iisftp.vbs, by typing the following at the command line:
Iisftp.vbs /SetADProp UserName FTPRoot Server\Share

Iisftp.vbs /SetADProp UserName FTPDir Directory

For complete Iisftp.vbs syntax, see Setting Active Directory User Isolation Using Iisftp.vbs, or type Iisftp.vbs /SetADProp /?at the command prompt.

You can complete the conversion by using the FTP Site Creation Wizard (recommended), or by following the procedure below to configure the metabase.


To convert an existing FTP site to Isolate users using Active Directory mode

1.In IIS Manager, click the local computer, double-click the FTP Sites folder, right-click the FTP site that you want to convert, and then click Stop.
2.Move existing user content into the new directories.

3.Edit the metabase directory or use adsutil.vbs to configure the following metabase properties:

• UserIsolationMode: Set to 2.

• ADConnectionUserName: Set to a user that has permission to read Active Directory properties. Use Domain\UserNameformat.

• ADConnectionPassword: Set to the password for the user in ADConnectionUserName.

• DefaultLogonDomain: Set to the default domain name.

• For the site root virtual directory: Set the Path property to an empty string, and add the value AccessNoPhysicalDirto the AccessFlagsproperty, using the | operator; for example: AccessFlags=AccessRead|AccessNoPhysicalDir.

• AllowAnonymous, AnonymousUserName, and AnonymousPassword: See To enable anonymous access for the Isolate Users Using Active Directory FTP site earlier in this topic for information on how to set these properties.

Important

Before you edit the metabase, verify that you have a backup copy that you can restore if a problem occurs. For information about how to do this, see Working with the Metabase.


4.In IIS Manager, click the local computer, double-click the FTP Sites folder, right-click the converted FTP site, and then click Start.