{"id":3774,"date":"2018-01-12T04:41:49","date_gmt":"2018-01-12T04:41:49","guid":{"rendered":"https:\/\/qbytes.cloud\/?p=3774"},"modified":"2018-01-12T04:41:49","modified_gmt":"2018-01-12T04:41:49","slug":"setup-ftp-server-users-windows-2012-r2","status":"publish","type":"post","link":"https:\/\/www.qbytes.cloud\/index.php\/2018\/01\/12\/setup-ftp-server-users-windows-2012-r2\/","title":{"rendered":"How to setup FTP server \/ users on Windows 2012 R2"},"content":{"rendered":"

Introduction<\/strong><\/h3>\n

This tutorial should assist with creating FTP server on Windows 2012 R2 \u2013 Depend on your version \u2013 Your setting might be slightly different.<\/p>\n

Even there are too many free third-party tools like Filezilla\u00a0that provide a client access to FTP serve..<\/p>\n

Here you have the steps I followed to set up my FTP server\u00a0in Windows 2012 R2.
\nThe steps below assume you are using IIS 8.5 that comes by default with Windows 2012 R2<\/p>\n

Prerequisites<\/strong><\/h3>\n
    \n
  • A Windows 2012 R2 server.<\/li>\n
  • An administrative account.<\/li>\n<\/ul>\n

    1-\u00a0Enable Web Server (IIS) role and FTP Server role service.<\/strong><\/h3>\n
      \n
    1. Log in to the server by using an administrative account<\/li>\n
    2. Open Server Manager<\/li>\n
    3. Go to\u00a0Manage > Add Roles and Features<\/strong><\/li>\n
    4. Click\u00a0Next<\/strong><\/li>\n
    5. Select\u00a0Role-based or feature-based installation<\/strong><\/li>\n
    6. Click\u00a0Next<\/strong><\/li>\n
    7. Select\u00a0Select a server from the server pool<\/strong>, and select your server
      \n<\/strong><\/li>\n
    8. Click\u00a0Next<\/strong>.<\/li>\n
    9. Scroll down and put a check mark in\u00a0Web Server (IIS)<\/strong><\/li>\n
    10. An Add features window pops up.\u00a0Put a check mark in the\u00a0Include management tools (if applicable)\u00a0<\/strong>option<\/li>\n
    11. Click\u00a0Add Features<\/strong>\u00a0button<\/li>\n
    12. Click\u00a0Next<\/strong><\/li>\n
    13. Click\u00a0Next<\/strong><\/li>\n
    14. Click\u00a0Next<\/strong><\/li>\n
    15. Scroll down and put a check mark in:\u00a0FTP server<\/strong>,\u00a0FTP Service<\/strong>\u00a0and\u00a0FTP Extensibility<\/strong>.<\/li>\n
    16. Click\u00a0Next<\/strong><\/li>\n
    17. Click\u00a0Install<\/strong><\/li>\n
    18. When installation is finished, click\u00a0Close<\/strong><\/li>\n<\/ol>\n

      2-\u00a0Create FTP users<\/strong><\/h3>\n

      You need to create users in Windows in order to be able to use FTP services.
      \nYou can use either local or domain users.
      \nIn this case, I will create some local users.
      \nThe only thing that changes if you use domain users is, when you log in to FTP, you must use the domain\/account format.<\/p>\n

        \n
      1. In Server Manager go to\u00a0Tools<\/strong><\/li>\n
      2. Click\u00a0Computer Management<\/strong><\/li>\n
      3. Click\u00a0Local Users and Groups<\/strong><\/li>\n
      4. Click\u00a0Users<\/strong><\/li>\n
      5. In the center pane, right-click a blank area and then select\u00a0New User\u2026<\/strong><\/li>\n
      6. Enter the username information and click the\u00a0Create\u00a0<\/strong>button<\/li>\n
      7. Create as many usernames you need here.<\/li>\n<\/ol>\n

        Optionally, you can create a group that contains all the FTP users in the\u00a0Groups\u00a0<\/strong>folder and add the users you created above.<\/p>\n

        3-\u00a0Configuring FTP global IIS settings.<\/strong><\/h3>\n

        You need to configure some global settings for your IIS server before creating your FTP site.
        \nIt is very easy, follow the steps below:<\/p>\n

          \n
        1. In Server Manager go to\u00a0Tools<\/strong><\/li>\n
        2. Click\u00a0Internet Information Services (IIS) manager<\/strong>.<\/li>\n
        3. In the left pane, double-click the server icon (in the tree below the option\u00a0Start Page<\/strong>)<\/li>\n
        4. If a window pops up asking about Microsoft Web Platform, select\u00a0Do not show this message<\/strong>, and click the\u00a0No<\/strong>\u00a0button<\/li>\n
        5. In the center pane, double-click the\u00a0FTP<\/b>\u00a0Authentication<\/b>\u00a0icon<\/li>\n
        6. If you want to allow anonymous users,right-click\u00a0Anonymous<\/b>\u00a0Authentication<\/b>\u00a0and set it to\u00a0Enable<\/b>.<\/li>\n
        7. To allow access to the windows users you created in Part Two\u00a0above, right-click\u00a0Basic\u00a0<\/strong>Authentication<\/b>\u00a0and set it to\u00a0Enable<\/b>.<\/li>\n
        8. In the left pane, double-click the server icon.<\/li>\n
        9. Double click the\u00a0FTP<\/b>\u00a0Authorization<\/b>\u00a0Rules<\/b>\u00a0option<\/li>\n
        10. Delete all rules in the center pane.<\/li>\n
        11. After all rules have been deleted, right-click a blank area in the center pane and select the option\u00a0Add<\/b>\u00a0Allow Rule\u2026<\/b><\/li>\n
        12. Click the option\u00a0Specified<\/b>\u00a0users.<\/b><\/li>\n
        13. In the text box type the usernames (separated by commas) you created in Part Two above.
          \n<\/b><\/li>\n
        14. Check either the boxes\u00a0Read\u00a0<\/b>or\u00a0Write\u00a0<\/b>depending the access you want to grant to the user or group of users you are adding.<\/li>\n
        15. Click the\u00a0OK\u00a0<\/b>button<\/li>\n
        16. Repeat steps 8 to 15 if you want to add more users with different Read \/ Write permissions.<\/li>\n<\/ol>\n

          4-\u00a0Creating FTP site.<\/strong><\/h3>\n
            \n
          1. Open Windows Explorer<\/li>\n
          2. Navigate to\u00a0C:\\inetpub\\ftproot<\/strong><\/li>\n
          3. This is the default local folder where the FTP directory tree will be saved<\/li>\n
          4. You can create your own folder in another directory or hard drive if you want.<\/li>\n
          5. Create your own folder at this point if it is desired.<\/li>\n
          6. Open\u00a0Server Manager<\/strong><\/li>\n
          7. Go to\u00a0Tools<\/strong><\/li>\n
          8. Click on\u00a0Internet Information Services (IIS) Manager<\/strong><\/li>\n
          9. In the left pane, right-click the server icon (in the tree below the option Start Page)<\/li>\n
          10. Click\u00a0Add FTP Site<\/b><\/li>\n
          11. In FTP site name type a friendly name for your site. (My FTP Site<\/strong>\u00a0\u00a0for example)<\/li>\n
          12. In\u00a0Physical path\u00a0<\/strong>browse to the folder you creates in steps 2 to 5<\/li>\n
          13. Click\u00a0Next<\/strong><\/li>\n
          14. In IP Address, click the drop down menu, and select the server\u2019s IP address you want to assign to the site<\/li>\n
          15. Port remains as\u00a021\u00a0<\/b>by default. You can change it if you want.<\/li>\n
          16. Ensure the option\u00a0Start FTP site automatically<\/b>\u00a0is checked<\/li>\n
          17. Select the\u00a0No SSL<\/b>\u00a0option if you are nor required to use certificates. Otherwise, select one of the other options.<\/li>\n
          18. Click\u00a0Next<\/b><\/li>\n
          19. In the Authentication section, put a check mark in\u00a0Anonymous\u00a0<\/b>If you want to allow anonymous users.<\/li>\n
          20. Put a check mark also in\u00a0Basic\u00a0<\/b>to allow access to users created in Part Two.<\/li>\n
          21. In the Allow access to: drop down menu, select:\u00a0Specified<\/b>\u00a0Users<\/b><\/li>\n
          22. In the text box type the usernames of the users you created in Part Two.
            \n<\/b><\/li>\n
          23. Check the box\u00a0Read\u00a0<\/b>to grant read access to users.<\/li>\n
          24. Check the box\u00a0Write<\/b>\u00a0to grant write access to users.<\/li>\n
          25. Click\u00a0Finish<\/b><\/li>\n<\/ol>\n

            5-\u00a0IIS Firewall setup.<\/strong><\/h3>\n
              \n
            1. In Server Manager go to\u00a0Tools<\/strong><\/li>\n
            2. Click\u00a0<\/strong>Internet Information Services (IIS) manager.<\/strong><\/li>\n
            3. In the left pane, double-click the server icon (in the tree below the option\u00a0Start Page<\/strong>)<\/li>\n
            4. In the center pane, double-click the\u00a0FTP Firewall Support<\/strong>\u00a0icon<\/li>\n
            5. In the\u00a0Data Channel Port Range\u00a0<\/strong>box, make sure the value is\u00a00-0<\/strong>\u00a0to use the default port range.<\/li>\n
            6. Or, you can change it if you want by your own set of ports.<\/li>\n
            7. Click\u00a0Apply<\/strong><\/li>\n
            8. Close Internet Information Services (IIS) Manager<\/li>\n<\/ol>\n

              6-\u00a0Windows Firewall setup.<\/strong><\/h3>\n

              By default, all exceptions needed for FTP are added to the Windows Firewall at the time you enable the FTP Server role.
              \nAnyway, for troubleshooting purposes, I will show the configuration that needs to be in place in order to allow FTP traffic in your server.<\/p>\n

                \n
              1. Open Server Manager
                \n<\/strong><\/li>\n
              2. In the left pane, click\u00a0Local Server<\/strong><\/li>\n
              3. In the right pane, click the hyperlink beside the\u00a0Windows Firewall<\/strong>\u00a0option. It should say\u00a0Public:On\u00a0<\/strong>\u00a0(or Off).<\/li>\n
              4. The Windows firewall window opens. In the left pane click\u00a0Advanced Settings<\/strong><\/li>\n
              5. The Windows Firewall with Advanced Security window opens. In the left pane click\u00a0Inbound Rules<\/strong>.<\/li>\n
              6. In the right pane, verify there\u2019s a rule called\u00a0FTP Server (FTP Traffic-In)<\/strong><\/li>\n
              7. Double click this rule.<\/li>\n
              8. In the\u00a0General\u00a0<\/strong>tab, verify the option\u00a0Enabled\u00a0<\/strong>is checked.<\/li>\n
              9. Go to the\u00a0Protocols and Ports<\/strong>\u00a0tab.<\/li>\n
              10. Verify the Protocol type is\u00a0TCP\u00a0<\/strong>and the\u00a0Local port<\/strong>\u00a0value is\u00a021<\/strong>.<\/li>\n
              11. Go to the\u00a0Advanced\u00a0<\/strong>tab<\/li>\n
              12. Make sure the profiles:\u00a0Domain<\/strong>,\u00a0Private\u00a0<\/strong>and\u00a0Public\u00a0<\/strong>are checked.<\/li>\n
              13. Click\u00a0OK\u00a0<\/strong>button<\/li>\n
              14. Execute the same validation in steps\u00a07-13<\/strong>\u00a0for the\u00a0FTP Server Passive (FTP Passive Traffic-In)<\/strong>rule. Except that the local port value in this rule should be1024-65535<\/strong><\/li>\n
              15. Execute the same validation in steps\u00a07-13<\/strong>\u00a0for the\u00a0FTP Server Secure (FTP SSL Traffic-In)\u00a0<\/strong>rule.Except that the local port value in this rule should be\u00a0990<\/strong><\/li>\n
              16. In the left pane, click\u00a0Outbound<\/strong>\u00a0Rules<\/strong><\/li>\n
              17. Execute the same validation in steps\u00a07-13<\/strong>\u00a0for the\u00a0FTP Server (FTP Traffic-Out)<\/strong>\u00a0rule. Except that\u00a0the local port value in this rule should be\u00a020<\/strong><\/li>\n
              18. Execute the same validation in steps\u00a07-13<\/strong>\u00a0for the\u00a0FTP Server Secure (FTP SSL Traffic-Out)\u00a0<\/strong>rule. Except that the local port value in this rule should be\u00a0989<\/strong><\/li>\n
              19. Close all windows.<\/li>\n<\/ol>\n

                \u00a07-\u00a0Testing<\/strong><\/h3>\n