Launch an FTP site on Windows Server (intra)
Prerequisites
The contents of this list are based on the following conditions:
- Basic authentication only
- Do not use SSL
- Use port 21
- Intranet work environment
Create an account for an FTP connection
Because i set up the connection by basic authentication this time, I create an account when I connect. You will create a Windows user account.
Right-click Start Menu and select Computer Management.
Right-click User and select New User.
Specify the user name and password to use when connecting via FTP.
The user is not logged on to Windows because it is used only for FTP connections. Double-click the user you created.
Select the Groups to belong to tab and delete Users.
Create a folder to use for FTP destinations
Create a folder to use for uploading or downloading when you connect with FTP. You create a physical folder in Windows.
You can create anylocation you want. However, don't place susset anywhere that might change depending on your environment, such as folders associated with your Windows account. We are creating "C:\FtpFolder\".
Set permissions so that your FTP account can access files in the folder. Open the properties of the folder that you want to use for FTP, and then click the Edit button from the Security tab.
Click the Add button.
Specify the account for FTP that you created. (I think the server name in the figure is different, so please replace it with the target server name.)
Select the account you registered and grant the Change permission.
Just in case, place the files to verify that you are connected properly when you connect via FTP.
Building an FTP Server
Install the FTP server role on Windows Server.
Run Server Manager from the taskbar.
Click Add Roles and Features.
Click Next.
Make sure that role-based or feature-based installation is checked, and then click Next.
Make sure that the server on which you want to install the FTP server role is selected, and then click Next.
Check Web Server (IIS).
A confirmation dialog appears, and click the "Add feature" button.
On the Select Features screen, do nothing and click Next.
Click Next.
Check FTP Server.
When you're done, click the Install button.
Wait for the installation to complete. Close the screen when the installation is complete.
Building an FTP site
You have just installed the FTP feature, so you still can't access the FTP site. This is where you build the FTP site.
From Server Manager, select the Tools menu and select Internet Information Services (IIS) Manager.
Right-click Sites and select Add FTP Site.
Set the FTP site name to any one. Physical Path specifies the folder path for FTP that you created earlier.
Let's leave the binding as it is for now. I don't use SSL this time, so i'll check SSL for None.
Since authentication is required for accounts, check only "basic".
When you return to the IIS administration screen, double-click FTP IP Address and Domain Restrictions to open it. Here you can limit the IP addresses of pCs that you can connect to. This setting is optional.
From the Action menu on the right, click Add Allow Entry.
You can specify which IP addresses you can connect to here. In the figure, the IP address is "192.168.0.0" and the mask is "255.255.255.0", which can be accessed from 192.168.0 to 192.168.0.255. Check the meaning of ip addresses and masks.
Then open FTP Authorization Rules. Here you can limit who can connect.
From the Actionmenu on the right, click Add Authorization Rule.
You can set it anyway, but only FtpUser is available for FTP access here.
Firewall settings
Configure the firewall so that ftp access is accessible from outside the server. For basic authentication that does not use SSL, add rules because they are not accessible in standard firewall settings.
From Server Manager, select the Tools menu and select Windows Firewall with Enhanced Security.
Right-click Inbound Rules and select New Rule.
Select Port.
Select TCP to set the port number to 21.
Check allow connections.
You can check everything, but if it's intranet work, you can remove public.
Make the rule you added a descriptive name. This completes the construction of the FTP site.
Ftp connection verification
Try to see if it can be accessed via FTP from another PC. You can use tools and so on as long as you can connect with FTP. In the figure, you are accessing it using ftp commands. Check out the FTP commands for more information. Here's a simple step.
- Launch command prompt
- Type "ftp" to start using the FTP command
- Connect to the server with open <server name>
- Enter your user name
- Enter your password
- "ls" command displays a list of files and folders in the root folder
- Disconnect FTP with quit
Depending on the client, the firewall permission confirmation screen will be displayed, so you can leave it allowed.