To set up an FTP server using IIS, first install the FTP service via Server Manager by adding the FTP Server role under IIS, then create the FTP site in IIS Manager by specifying a name and physical path while configuring bindings and SSL settings, next configure user access either through local Windows accounts or Active Directory integration by enabling Basic Authentication and setting appropriate NTFS permissions, and finally secure the setup by requiring SSL, disabling Anonymous Authentication, and optionally restricting IP access and ensuring proper firewall configuration for ports.

Setting up an FTP server using IIS (Internet Information Services) is a solid option if you're working in a Windows Server environment and need to allow file transfers over the network. It's not overly complicated, but there are a few key steps and settings that make all the difference—especially when it comes to user access and security.

Installing the FTP Service in IIS

Before you can set up an FTP site, you need to make sure the FTP server role is installed. On Windows Server, this is part of the IIS role but isn't included by default.

• Open Server Manager > Add Roles and Features
• Go through the wizard until you reach the Server Roles
• Check Web Server (IIS) if it’s not already installed
• Expand the IIS section, then scroll down and check FTP Server
• Continue with the installation

Once installed, you’ll find the FTP options under IIS Manager, ready for configuration.

Creating the FTP Site in IIS

After installing the FTP service, the next step is setting up your actual FTP site.

Here’s how:

1. Open Internet Information Services (IIS) Manager
2. In the left pane, right-click on the server node and select Add FTP Site
3. Give your site a name and specify the physical path where files will be stored
4. Set the binding and SSL settings:
   • Use port 21 unless you have a reason to change it
   • Choose whether to require SSL or not (more on that later)

At this point, your basic FTP structure is in place, but no one can log in yet because we haven’t configured users or permissions.

Setting Up User Access: Local vs. Custom Accounts

One of the most important parts of setting up an FTP server in IIS is deciding how users authenticate.

There are two main approaches:

• Local Windows accounts: This is straightforward—you create standard Windows users on the server, and they use those credentials to log in via FTP.
• Custom provider / Active Directory: If you’re in a domain environment, you might want to integrate with AD. For smaller setups, though, local accounts are usually easier.

To enable local user authentication:

• In IIS Manager, click on your FTP site
• Double-click FTP User Isolation
• Select User name directory (disable global virtual directories)
• Back at the main view, click FTP Authentication
• Enable Basic Authentication

Make sure you’ve created the appropriate Windows users under Computer Management > Users.

Securing Your FTP Setup

FTP is inherently insecure—it sends usernames and passwords in plain text. That’s why it’s smart to use SSL whenever possible.

• In the FTP site settings, under SSL Settings, check Require SSL
• Under FTP Authentication, disable Anonymous Authentication
• Consider limiting IP access:
  • Use IP Address and Domain Restrictions to block or allow certain IPs

Also, make sure your firewall allows traffic on port 21 (and possibly others like 989–990 for secure data transfer).

Another often-overlooked detail: folder permissions. Even if a user has the correct login, they won’t be able to read or write files unless their Windows account has proper NTFS permissions on the FTP root folder.

So double-check that each user has Read or Write access as needed.

That’s basically it. You’ve got a working FTP server in IIS, with user access configured and some level of security applied. It’s not flashy, but done right, it works reliably for internal teams or controlled external transfers.

The above is the detailed content of Setting Up FTP Server Features and User Access in IIS. For more information, please follow other related articles on the PHP Chinese website!