Users Cannot FTP to a Windows 2000 IIS Server, System Reports 'Access Denied' with Event ID 100 (285806)
The information in this article applies to:
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Datacenter Server
This article was previously published under Q285806 SYMPTOMS
Although members of the Domain Admins group can successfully FTP to a Windows 2000-based Internet Information Services (IIS) server, members of the Domain Users group may be unable to do so. They may receive the following error message:
Access Denied
Event ID:100
Source: MSFTPSVC
CAUSE
This behavior can occur because the Users group does not by default have the Log on Locally user right, which is required to connect to resources hosted on an IIS server.
RESOLUTION
To resolve this issue, modify the Group Policy Object (GPO) for the domain controller to assign the Log on Locally user right to the Users group: - Click Start, point to Programs, point to Administrative Tools, and then click Domain Controller Security Policy.
- Double-click Security Settings, double-click Local Policies, and then click User Rights Assignment.
- Under Policy, click Log on Locally, and then click Add.
- Click Browse, locate and click the appropriate group, and then click Add.
- Click OK in the open dialog boxes to close them and save the new settings.
- To refresh the group policy, start a command prompt, type the following command and press ENTER, and then press ENTER again when you are prompted:
secedit /refreshpolicy machine_policy /enforce
STATUS
This behavior is by design.
| Modification Type: | Major | Last Reviewed: | 9/19/2003 |
|---|
| Keywords: | kbprb KB285806 |
|---|
|