How to Log Incoming Connections with FTP Server (103076)


The information in this article applies to:

  • Microsoft Windows NT Server 3.1
  • Microsoft Windows NT Workstation 3.1
  • Microsoft Windows NT Advanced Server 3.1
This article was previously published under Q103076

SUMMARY

WARNING: Using Registry Editor incorrectly can cause serious, system-wide problems that may require you to reinstall Windows NT to correct them. Microsoft cannot guarantee that any problems resulting from the use of Registry Editor can be solved. Use this tool at your own risk.

The Windows NT File Transfer Protocol (FTP) Server software allows the network administrator to optionally log incoming connections in the Event Viewer, both from anonymous as well as nonanonymous users.

To activate logging, use the following procedure:

  1. Open the Registry Editor (REGEDT32.EXE).
  2. Use the following path: 
          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FtpSvc
      \Parameters
  3. From the Edit menu, choose Add Value to create the following entries: 
          LogAnonymous
      LogNonAnonymous
  4. Set the Data Type of both values to REG_DWORD.
  5. Set the Data to 1 for both entries, leaving Hex as the default.
FTP Connections will now be logged to the System event log and can be viewed using Event Viewer.
Modification Type:MajorLast Reviewed:11/20/2003
Keywords:kbnetwork KB103076
©2003 Microsoft Corporation. All rights reserved.