Shulou(Shulou.com)06/03 Report--

This article mainly explains "how to use Iisftp.vbs to set up Active Directory user isolation". The content of the article is simple and clear, and it is easy to learn and understand. Please follow the editor's train of thought to study and learn "how to use Iisftp.vbs to set Active Directory user isolation".

Apply to: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1

You can use the command line script iisftp.vbs (stored in systemroot\ System32) to query and set the Active Directory directory service properties of the user's File transfer Protocol (FTP) home directory. For more information about user isolation, see isolating FTP users.

Important matters

Only members of the Administrators group on the local computer can run scripts and executables. As a security best practice, log on to the computer using an account that is not part of the Administrators group, and then use the runas command to run scripts and executables as an administrator. At the command prompt, type runas / profile / User:MyComputer\ Administrator cmd, open a command window with administrator privileges, and then type cscript.exeScriptName (including the full path to the script and any parameters).

This topic includes the following information:

Syntax: the order in which you must type a command and any parameters and options that follow it.

Parameter: the value assigned to the variable in the command.

Example: sample code and a description of the result.

Grammar

Iisftp / GetADProp UserID [/ s Computer [/ u [Domain\] User / p Password]]

Iisftp / SetADProp UserID {msIIS-FTPDir | msIIS-FTPRoot} PropertyValue [/ s Computer [/ u [Domain\] User / p Password]]

Parameters.

/ GetADProp

Returns the property value of a specific Active Directory user.

/ SetADProp

Sets the property value for a specific Active Directory user.

UserID

Necessary. Specifies the login ID for the Active Directory user.

MsIIS-FTPDir | msIIS-FTPRoot

Required to set home directory properties. Specify isolation at the directory level or at the root level.

PropertyValue

Required to set home directory properties. Specify values for home directories and relative paths.

/ s Computer

Specifies the name or IP address of the remote computer (without a backslash). The default is the local computer.

/ u [Domain\] User

Connect to Active Directory with the permissions of the specified user account in the format user or domain\ user. The account must be a member of the Administrators group on the remote computer. By default, the script runs with the permissions of the current user on the local computer.

/ p Password

Specifies the password for the user account specified in the / u parameter.

Example

Example 1:

The following example returns the Active Directory property of the user "BSmith" on the local computer.

The copy code is as follows:

Iisftp / GetADProp BSmith

In response, iisftp displays the following message, followed by the Active Directory attribute of BSmith in the default domain. In this example, "server" represents the computer name of drive D: on which it resides, "Site Name" represents the name assigned to the FTP site, "Metabase Path" represents the configuration database entry specified by IIS, "IP" is not assigned by default, "Port" is set to 21 by default, "Root" is the directory where FTP files reside, "IsoMode" is set to "FTPRoot", and "Status" is set to "STARTED" by default.

Connecting to server... Done.

Server = FTPServer

Site Name = Smittys

Metabase Path = MSFTPSVC/1452008083

IP = ALL UNASSIGNED

Port = 21

Root = D:\ Public\ Archives

IsoMode = FTPRoot

Status = STARTED

Example 2:

The following example sets the home directory property in the Active Directory user object property for the user "Sales\ MJones" on the remote computer.

The copy code is as follows:

Iisftp / SetADProp Sales\ MJones FTPDir MikesDir / s SVR16 / u Sales\ Admin6 / p p@ssWor#

In response, iisftp displays the following message, including the Active Directory property of MJones. In this example, "server" represents the computer name of drive D: on which it resides, "Site Name" represents the name assigned to the FTP site, "Metabase Path" represents the configuration database entry specified by IIS, "IP" is not assigned by default, "Port" is set to 21 by default, "Root" is the directory where FTP files reside, "IsoMode" is set to "FTPDir", and "Status" is set to "STARTED" by default.

Connecting to server... Done.

Server = SVR16

Site Name = MikesDir

Metabase Path = MSFTPSVC/1452004045

IP = ALL UNASSIGNED

Port = 21

Root = D:\ Public\ Archives

IsoMode = FTPDir

Status = STARTED

Thank you for reading, the above is "how to use Iisftp.vbs to set up Active Directory user isolation" content, after the study of this article, I believe you have a deeper understanding of how to use Iisftp.vbs to set Active Directory user isolation, the specific use of the situation also needs to be verified in practice. Here is, the editor will push for you more related knowledge points of the article, welcome to follow!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.