Hi,
I configured and tested for the first time a FTP server with IIS 8 on a Windows Server 2012 Standard server which is an AD DC. I noticed weird behaviors when playing with the AD groups and accounts and the FTP Authorization Rules on IIS to manage the access rights on the FTP server.
In FTP Authorization Rules on the IIS server, I created a rule that gives Read rights to an AD groupcalled FTP Users Read and Read/Write rights to a group called FTP Users Write.
In AD, I created these 2 groups and added the users I wanted as members.
I also added the Read/Write rights for these 2 groups on the Security tab in the properties of the root folder of the FTP server, otherwise it doesn't work!
I noticed mainly 2 weird behaviors:
- If you disable a user account in AD but this account is a member of a group that gives you rights to access to the FTP server in FTP Authorization Rules, this account can still connect to the FTP server (but not log in Windows of course). Is this behavior normal?
- If you remove a user account from the AD group that gave him access to the FTP server via the FTP Authorization Rules, the user still has access to it even after your restart the FTP site in "Manage FTP Site". The only solution I found was to reboot the whole server machine which is of course inconvenient. Is it normal? Is there another way to refresh the rights of the FTP server?
Thanks for your help.