How To Create Ftp Folder In Windows Server 2008 R2

Documentation » Using WinSCP » Guides » Other »

Installing a secure FTP server on Windows using IIS

You may want to install a secure FTP server on Windows either equally standalone file storage or to have means of editing your website hosted on IIS (Internet Data Services) web server. In both cases, y'all can use an optional FTP Server component of the IIS. It tin can exist installed standalone or along with a Web Server.i

• Installing FTP Server
  • On Windows Server 2022, Windows Server 2019, Windows Server 2016 and Windows Server 2012
  • On Windows Server 2008 R2
  • On Windows Desktop (Windows xi, Windows 10, Windows 8, Windows seven and Windows Vista)
• Opening IIS Manager
• Creating Certificate for the FTPS Server
• Servers behind external Firewall/NAT
• Windows Firewall Rules
• Restarting FTP Service
• Adding FTP Site
  • To a Web Site
  • Standalone FTP Site
• Connecting to Your FTPS Server
• Further reading

Installing FTP Server

On Windows Server 2022, Windows Server 2019, Windows Server 2016 and Windows Server 2012

• In Windows Server Manager go to Dashboard and run Manage > Add Roles and Features.

Advertising

• In Add Roles and Features wizard:
  • Proceed to Installation Type pace and confirm Role-based or feature-based installation.
  • Go along to Server Roles step and check Spider web Server (IIS) role. Annotation that information technology is checked already, if y'all had IIS installed as a Web Server previously. If your are prompted to install IIS Direction Console tool, ostend information technology.
  • Continue to Web Server Role (IIS) > Part Services step and check FTP Server office service. Uncheck Web Server role service, if you do not demand it.
  • Go on to the end of the wizard and click Install.
  • Wait for the installation to complete.

Advertisement

Skip to the next footstep.

On Windows Server 2008 R2

If you practice not have IIS installed nevertheless:

• In Windows Server Director go to Roles node and in Roles Summary panel click Add Roles.
• In Add together Roles wizard:
  • Proceed to Server Roles pace and check Web Server (IIS) role.
  • Keep to Function Services step and check FTP Server > FTP Service role service. Uncheck Web Server role service, if you do not demand it. Make sure Management Service > IIS Management Console function service is checked.
  • Go along to the end of the magician and click Install.
  • Wait for the installation to consummate.

If y'all take IIS installed already (i.e. as a Web Server):

• In Windows Server Manager go to Roles node and in Web Server (IIS) > Role Services panel click Add Office Services.
• In Add together Function Services wizard:
  • Check FTP Server > FTP Service function service.
  • Make certain that Direction Service > IIS Management Console is checked.
  • Confirm with Next button.
  • Keep to the end of the wizard and click Install.
  • Wait for the installation to complete.

Advertisement

Skip to the next pace.

On Windows Desktop (Windows 11, Windows ten, Windows viii, Windows 7 and Windows Vista)

• Go to Command Panel > Programs > Programs and Features > Turn Windows features on or off.
• On a Windows Features window:
  • Expand Internet Data Services > FTP Server and bank check FTP Service.
  • Aggrandize Net Data Services > Web Management Tools and check IIS Direction Panel, if it is non checked yet.
  • Ostend with OK button.
  • Look for the installation to complete.

Opening IIS Manager

• Become to Control Panel > Arrangement and Security > Administrative Tools (Windows Tools on Windows 11) and open up Internet Information Services (IIS) Manager.
• Navigate to your Windows server node.

Ad

Creating Certificate for the FTPS Server

You lot demand a TLS/SSL certificate to secure your FTP server. Ideally, you should acquire the certificate from a certificate dominance.

You may also create a cocky-signed certificate locally, just in such case users of your FTPS server will exist warned, when connecting to the server.

To create the self-signed certificate:

• In IIS Manager, open IIS > Server Certificates.
• Click on Create Cocky-Signed Certificate activity.
• Specify a certificate name (e.g. "FTP Server") and submit with OK.

Cocky-signed certificates created by sometime versions of IIS Manager practise not piece of work with FTPS clients that check for cardinal usage violations.2 To create a certificate with a correct primal usage, use New-SelfSignedCertificate PowerShell equally an Administrator:

            New-SelfSignedCertificate            -FriendlyName            "FTP Server"            -CertStoreLocation cert:\localmachine\my -DnsName ftp.case.com

Servers behind external Firewall/NAT

If your server is behind an external firewall/NAT, y'all need to tell the FTP server its external IP accost, to allow passive mode connections.

• In IIS Manager, open FTP > FTP Firewall Support.
• Specify your server'due south external IP address.
  For Microsoft Azure Windows servers you volition detect the external IP address in Public IP address department of the virtual motorcar page.

When behind an external firewall, yous need to open up ports for data connections (obviously in addition to opening an FTP port 21 and peradventure an implicit TLS/SSL FTP port 990). You won't probably want to open whole default port range 1024-65535. In such instance, y'all need to tell the FTP server to use just the range that is opened on the firewall. Utilize a Information Channel Port Range box for that. Any time you change this range, yous will demand to restart FTP service. Learn how to open ports on Microsoft Azure.

Advertisement

Click Employ action to submit your settings.

Some external firewalls are able to monitor FTP control connection and automatically open and close the data connection ports every bit needed. And then you do not demand to have whole port range opened all the time, even when not in employ. This won't work with the secure FTPS as the control connection is encrypted and the firewall cannot monitor it.

Windows Firewall Rules

An internal Windows firewall is automatically configured with rules for the ports 21, 990 and 1024-65535 when IIS FTP server is installed.

The rules are not enabled initially on some versions of Windows.iii To enable or modify the rules, go to Control Console > System and Security > Windows Defender Firewalliv > Avant-garde Settings > Inbound Rules and locate 3 "FTP server" rules. If the rules are not enabled, click on Actions > Enable Rule.

Restarting FTP Service

While the internal Windows firewall is automatically configured to open FTP ports when FTP server is installed, this modify does not seem to apply, until FTP service is restarted. The same is true for changing data aqueduct port range.

To restart FTP service go to Control Panel > System and Security > Authoritative Tools (Windows Tools on Windows 11) and open Services. Locate Microsoft FTP Service and click Restart service.5

Adding FTP Site

To a Web Site

If y'all want to add FTP server to manage your existing web site remotely, locate your web site node in IIS Manager and:

• Click Add FTP Publishing action.
• In Add FTP Site Publishing sorcerer:
  • On an initial Binding and SSL Settings step, select Require SSL to disallow non-encrypted connections and select your document.
  • On Authentication and Authority Data footstep, select Basic hallmark and brand certain Bearding authentication is non selected. Select which users (Windows accounts) you permit to connect to the server with what permissions. You can choose All users or select only some. Do non select Anonymous users.
  • Submit with Finish push.

Advert

Your secure FTPS server is at present running and can be continued to.

Standalone FTP Site

If y'all want to add a standalone FTP server to store/substitution files, locate Sites node (binder) of your Windows server in IIS Director and:

• Click Add together FTP Site action.
• In Add FTP Site wizard:
  • On an initial Site Information step, give a proper name to your FTP site (if it's the only site yous are going to take, simple "FTP site" suffice) and specify a path to a binder on your server'southward deejay that is going to be accessible using FTP.
  • On a Binding and SSL Settings footstep, select Crave SSL to disallow not-encrypted connections and select your certificate.
  • On Authentication and Potency Information step, select Basic hallmark and brand sure Anonymous authentication is not selected. Select which users (Windows accounts) yous permit to connect to the server with what permissions. You lot can choose All users or select only some. Exercise non select Anonymous users.
  • Submit with Finish button.

Your secure FTPS server is at present running and can exist connected to.

Connecting to Your FTPS Server

For connecting to a Microsoft Azure Windows instance, see a specific guide.

Start WinSCP. Login Dialog will appear. On the dialog:

• Select FTP protocol and TLS/SSL Explicit encryption.
• Enter your Windows server hostname to Host name field. Avoid using an IP address to permit WinSCP to verify that the hostname matches with host the server'due south document was issued to (not applicable to self-signed certificates).
• Specify username and password for Windows account you desire to connect with (when using domain accounts, you need to specify a total username with format domain\username).
• You may want to salve your session details to a site so you do non demand to type them in every time you desire to connect. Press Save push button and type site proper name.
• Press Login to connect.
• If you are using self-signed certificate, you will be prompted to accept it.

Advertizement

Further reading

• Installing secure FTP server on Microsoft Azure using IIS;
• Installing SFTP/SSH Server on Windows using OpenSSH;
• Upload files to FTP server or SFTP server;
• Automate file transfers (or synchronization) to FTP server or SFTP server.

Source: https://winscp.net/eng/docs/guide_windows_ftps_server

Posted by: wrightdeshe1946.blogspot.com

Share this post