FTP Clients Can Access the Root Directory Without NTFS (101922)


The information in this article applies to:

  • Microsoft Windows NT Server 3.1
  • Microsoft Windows NT Workstation 3.1
  • Microsoft Windows NT Advanced Server 3.1
This article was previously published under Q101922

SYMPTOMS

File Transfer Protocol (FTP) clients are able to access the root directory of a Windows NT FTP server even though the default directory for FTP server is not the root directory.

CAUSE

The path to parent directories, "CD ..", is not disabled by FTP server.

Specifying a default directory in FTP server only states which directory FTP clients will default to when logged in, but does not disable the path to parent directories.

RESOLUTION

NTFS, which can provide user level security, should be used to assign directory rights for accounts that will use the Windows NT FTP Server.
Modification Type:MajorLast Reviewed:11/20/2003
Keywords:kbnetwork KB101922
©2003 Microsoft Corporation. All rights reserved.